(19)
(11) EP 1 749 779 B1

(12) EUROPEAN PATENT SPECIFICATION

(45) Mention of the grant of the patent:
03.04.2013 Bulletin 2013/14

(21) Application number: 04734621.8

(22) Date of filing: 24.05.2004
(51) International Patent Classification (IPC): 
B66B 5/02(2006.01)
B66B 5/00(2006.01)
(86) International application number:
PCT/JP2004/007404
(87) International publication number:
WO 2005/113401 (01.12.2005 Gazette 2005/48)

(54)

ELEVATOR CONTROLLER

AUFZUGSSTEUERUNG

CONTRÔLEUR D'ÉLÉVATEUR


(84) Designated Contracting States:
DE ES FR PT

(43) Date of publication of application:
07.02.2007 Bulletin 2007/06

(73) Proprietor: Mitsubishi Denki Kabushiki Kaisha
Chiyoda-ku Tokyo 100-8310 (JP)

(72) Inventor:
  • CHIDA, Akihiro, Mitsubishi Denki Kabushiki Kaisha
    Tokyo 100-8310 (JP)

(74) Representative: HOFFMANN EITLE 
Patent- und Rechtsanwälte Arabellastrasse 4
81925 München
81925 München (DE)


(56) References cited: : 
JP-A- 3 256 992
JP-A- 4 237 309
JP-A- 2002 012 157
US-A- 5 175 400
US-B1- 6 497 303
JP-A- 4 237 309
JP-A- 11 143 846
JP-A- 2002 251 232
US-A1- 2002 133 241
   
       
    Note: Within nine months from the publication of the mention of the grant of the European patent, any person may give notice to the European Patent Office of opposition to the European patent granted. Notice of opposition shall be filed in a written reasoned statement. It shall not be deemed to have been filed until the opposition fee has been paid. (Art. 99(1) European Patent Convention).


    Description

    Technical Field



    [0001] The present invention relates to an elevator control apparatus having a power supply voltage monitoring circuit for monitoring a power supply voltage.

    Background Art



    [0002] In a conventional elevator door control apparatus disclosed in, for example, JP 3-256992 A, a voltage monitoring circuit monitors a power supply voltage of a door driving motor, and forcible braking means brakes the door driving motor when an abnormality in the power supply voltage is detected.

    [0003] However, in a door control apparatus as described above, when an abnormality occurs in the voltage monitoring circuit itself, for example, an output signal of the monitored result is fixed to the side indicating a normal state, the voltage cannot be monitored normally until that abnormality is eliminated.

    [0004] Therefore, application of a conventional monitoring system to essential components of elevator control apparatuses such as an operation control unit and a safety unit is insufficient in reliability.

    [0005] JP4237309 discloses a digital control system capable of reliably checking the soundness of a circuit for controlling an apparatus capable of changing the state of a system between "safe" and "unsafe". In order to check the soundness, the control system uses a soundness evaluation means to compare the state of the driving means with a simulated state.

    Disclosure of the Invention



    [0006] The present invention is made to solve the problem described above. Therefore, it is an object of the present invention to obtain an elevator control apparatus capable of enhancing reliability of the monitoring a power supply voltage.

    [0007] According to the present invention, an elevator control apparatus comprises: a processing portion for performing a processing relating to control of an elevator; a power supply voltage monitoring circuit for monitoring a power supply voltage supplied to the processing portion; and a voltage monitoring soundness checking function circuit which is adapted to output a monitoring input voltage forcible change signal for forcibly changing a power supply voltage input to the power supply voltage monitoring circuit in response to a control signal from the processing portion and to which a voltage abnormality detection signal from the power supply voltage monitoring circuit is input, the voltage monitoring soundness checking function circuit holds at least some of contents of signals exchanged between the processing portion and the power supply voltage monitoring circuit, and the processing portion checks soundness of the power supply voltage monitoring circuit by reading data held by the voltage monitoring soundness checking function circuit.

    Brief Description of the Drawings



    [0008] 

    Fig. 1 is a schematic diagram showing an elevator apparatus according to Embodiment 1 not part of the present invention.

    Fig. 2 is a front view showing the safety device of Fig. 1.

    Fig. 3 is a front view showing the safety device of Fig. 2 that has been actuated.

    Fig. 4 is a schematic diagram showing an elevator apparatus according to Embodiment 2 not part of the present invention.

    Fig. 5 is a front view showing the safety device of Fig. 4.

    Fig. 6 is a front view showing the safety device of Fig. 5 that has been actuated.

    Fig. 7 is a front view showing the drive portion of Fig. 6.

    Fig. 8 is a schematic diagram showing an elevator apparatus according to Embodiment 3 not part of the present invention.

    Fig. 9 is a schematic diagram showing an elevator apparatus according to Embodiment 4 not part of the present invention.

    Fig. 10 is a schematic diagram showing an elevator apparatus according to Embodiment 5 not part of the present invention.

    Fig. 11 is a schematic diagram showing an elevator apparatus according to Embodiment 6 not part of the present invention.

    Fig. 12 is a schematic diagram showing another example of the elevator apparatus shown in Fig. 11.

    Fig. 13 is a schematic diagram showing an elevator apparatus according to Embodiment 7 not part of the present invention.

    Fig. 14 is a schematic diagram showing an elevator apparatus according to Embodiment 8 not part of the present invention.

    Fig. 15 is a front view showing another example of the drive portion shown in Fig. 7.

    Fig. 16 is a plan view showing a safety device according to Embodiment 9 not part of the present invention.

    Fig. 17 is a partially cutaway side view showing a safety device according to Embodiment 10 not part of the present invention.

    Fig. 18 is a schematic diagram showing an elevator apparatus according to Embodiment 11 not part of the present invention.

    Fig. 19 is a graph showing the car speed abnormality determination criteria stored in the memory portion of Fig. 18.

    Fig. 20 is a graph showing the car acceleration abnormality determination criteria stored in the memory portion of Fig. 18.

    Fig. 21 is a schematic diagram showing an elevator apparatus according to Embodiment 12 not part of the present invention.

    Fig. 22 is a schematic diagram showing an elevator apparatus according to Embodiment 13 not part of the present invention.

    Fig. 23 is a diagram showing the rope fastening device and the rope sensors of Fig. 22.

    Fig. 24 is a diagram showing a state where one of the main ropes of Fig. 23 has broken.

    Fig. 25 is a schematic diagram showing an elevator apparatus according to Embodiment 14 not part of the present invention.

    Fig. 26 is a schematic diagram showing an elevator apparatus according to Embodiment 15 not part of the present invention.

    Fig. 27 is a perspective view of the car and the door sensor of Fig. 26.

    Fig. 28 is a perspective view showing a state in which the car entrance 26 of Fig. 27 is open.

    Fig. 29 is a schematic diagram showing an elevator apparatus according to Embodiment 16 not part of the present invention.

    Fig. 30 is a diagram showing an upper portion of the hoistway of Fig. 29.

    Fig. 31 is a block diagram showing an essential part of an elevator control apparatus according to Embodiment 17 of the present invention.

    Fig. 32 is a circuit diagram showing an example of a concrete configuration of a voltage monitoring soundness checking function circuit in Fig. 31.

    Fig. 33 is a chart for explaining the meaning of data on respective bits in a data bus when a first CPU and a second CPU read data from the voltage monitoring soundness checking function circuit.

    Fig. 34 is a flowchart showing a method of checking power supply voltage monitoring soundness on the first CPU side in Fig. 31.

    Fig. 35 is a flowchart showing the operation in the case where the CPU's are reset in the elevator control apparatus of Fig. 31.

    Fig. 36 is a schematic diagram showing an elevator apparatus according to Embodiment 18 not part of the present invention.


    Best Modes for carrying out the Invention



    [0009] Hereinbelow, preferred embodiments of the present invention are described with reference to the drawings.

    Embodiment 1



    [0010] Fig. 1 is a schematic diagram showing an elevator apparatus according to Embodiment 1 not part of the present invention. Referring to Fig. 1, a pair of car guide rails 2 are arranged within a hoistway 1. A car 3 is guided by the car guide rails 2 as it is raised and lowered in the hoistway 1. Arranged at the upper end portion of the hoistway 1 is a hoisting machine (not shown) for raising and lowering the car 3 and a counterweight (not shown). A main rope 4 is wound around a drive sheave of the hoisting machine. The car 3 and the counterweight are suspended in the hoistway 1 by means of the main rope 4. Mounted to the car 3 are a pair of safety devices 5 opposed to the respective guide rails 2 and serving as braking means. The safety devices 5 are arranged on the underside of the car 3. Braking is applied to the car 3 upon actuating the safety devices 5.

    [0011] Also arranged at the upper end portion of the hoistway 1 is a governor 6 serving as a car speed detecting means for detecting the ascending/descending speed of the car 3. The governor 6 has a governor main body 7 and a governor sheave 8 rotatable with respect to the governor main body 7. A rotatable tension pulley 9 is arranged at a lower end portion of the hoistway 1. Wound between the governor sheave 8 and the tension pulley 9 is a governor rope 10 connected to the car 3. The connecting portion between the governor rope 10 and the car 3 undergoes vertical reciprocating motion as the car 3 travels. As a result, the governor sheave 8 and the tension pulley 9 are rotated at a speed corresponding to the ascending/descending speed of the car 3.

    [0012] The governor 6 is adapted to actuate a braking device of the hoisting machine when the ascending/descending speed of the car 3 has reached a preset first overspeed. Further, the governor 6 is provided with a switch portion 11 serving as an output portion through which an actuation signal is output to the safety devices 5 when the descending speed of the car 3 reaches a second overspeed (set overspeed) higher than the first overspeed. The switch portion 11 has a contact 16 which is mechanically opened and closed by means of an overspeed lever that is displaced according to the centrifugal force of the rotating governor sheave 8. The contact 16 is electrically connected to a battery 12, which is an uninterruptible power supply capable of feeding power even in the event of a power failure, and to a control panel 13 that controls the drive of an elevator, through a power supply cable 14 and a connection cable 15, respectively.

    [0013] A control cable (movable cable) is connected between the car 3 and the control panel 13. The control cable includes, in addition to multiple power lines and signal lines, an emergency stop wiring 17 electrically connected between the control panel 13 and each safety device 5. By closing of the contact 16, power from the battery 12 is supplied to each safety device 5 by way of the power supply cable 14, the switch portion 11, the connection cable 15, a power supply circuit within the control panel 13, and the emergency stop wiring 17. It should be noted that transmission means consists of the connection cable 15, the power supply circuit within the control panel 13, and the emergency stop wiring 17.

    [0014] Fig. 2 is a front view showing the safety device 5 of Fig. 1, and Fig. 3 is a front view showing the safety device 5 of Fig. 2 that has been actuated. Referring to the figures, a support member 18 is fixed in position below the car 3. The safety device 5 is fixed to the support member 18. Further, each safety device 5 includes a pair of actuator portions 20, which are connected to a pair of wedges 19 serving as braking members and capable of moving into and away from contact with the car guide rail 2 to displace the wedges 19 with respect to the car 3, and a pair of guide portions 21 which are fixed to the support member 18 and guide the wedges 19 displaced by the actuator portions 20 into contact with the car guide rail 2. The pair of wedges 19, the pair of actuator portions 20, and the pair of guide portions 21 are each arranged symmetrically on both sides of the car guide rail 2.

    [0015] Each guide portion 21 has an inclined surface 22 inclined with respect to the car guide rail 2 such that the distance between it and the car guide rail 2 decreases with increasing proximity to its upper portion. The wedge 19 is displaced along the inclined surface 22. Each actuator portion 20 includes a spring 23 serving as an urging portion that urges the wedge 19 upward toward the guide portion 21 side, and an electromagnet 24 which, when supplied with electric current, generates an electromagnetic force for displacing the wedge 19 downward away from the guide member 21 against the urging force of the spring 23.

    [0016] The spring 23 is connected between the support member 18 and the wedge 19. The electromagnet 24 is fixed to the support member 18. The emergency stop wiring 17 is connected to the electromagnet 24. Fixed to each wedge 19 is a permanent magnet 25 opposed to the electromagnet 24. The supply of electric current to the electromagnet 24 is performed from the battery 12 (see Fig. 1) by the closing of the contact 16 (see Fig. 1). The safety device 5 is actuated as the supply of electric current to the electromagnet 24 is cut off by the opening of the contact 16 (see Fig. 1). That is, the pair of wedges 19 are displaced upward due to the elastic restoring force of the spring 23 to be pressed against the car guide rail 2.

    [0017] Next, operation is described. The contact 16 remains closed during normal operation. Accordingly, power is supplied from the battery 12 to the electromagnet 24. The wedge 19 is attracted and held onto the electromagnet 24 by the electromagnetic force generated upon this power supply, and thus remains separated from the car guide rail 2 (Fig. 2).

    [0018] When, for instance, the speed of the car 3 rises to reach the first overspeed due to a break in the main rope 4 or the like, this actuates the braking device of the hoisting machine. When the speed of the car 3 rises further even after the actuation of the braking device of the hoisting machine and reaches the second overspeed, this triggers closure of the contact 16. As a result, the supply of electric current to the electromagnet 24 of each safety device 5 is cut off, and the wedges 19 are displaced by the urging force of the springs 23 upward with respect to the car 3. At this time, the wedges 19 are displaced along the inclined surface 22 while in contact with the inclined surface 22 of the guide portions 21. Due to this displacement, the wedges 19 are pressed into contact with the car guide rail 2. The wedges 19 are displaced further upward as they come into contact with the car guide rail 2, to become wedged in between the car guide rail 2 and the guide portions 21. A large frictional force is thus generated between the car guide rail 2 and the wedges 19, braking the car 3 (Fig. 3).

    [0019] To release the braking on the car 3, the car 3 is raised while supplying electric current to the electromagnet 24 by the closing of the contact 16. As a result, the wedges 19 are displaced downward, thus separating from the car guide rail 2.

    [0020] In the above-described elevator apparatus, the switch portion 11 connected to the battery 12 and each safety device 5 are electrically connected to each other, whereby an abnormality in the speed of the car 3 detected by the governor 6 can be transmitted as an electrical actuation signal from the switch portion 11 to each safety device 5, making it possible to brake the car 3 in a short time after detecting an abnormality in the speed of the car 3. As a result, the braking distance of the car 3 can be reduced. Further, synchronized actuation of the respective safety devices 5 can be readily effected, making it possible to stop the car 3 in a stable manner. Also, each safety device 5 is actuated by the electrical actuation signal, thus preventing the safety device 5 from being erroneously actuated due to shaking of the car 3 or the like.

    [0021] Additionally, each safety device 5 has the actuator portions 20 which displace the wedge 19 upward toward the guide portion 21 side, and the guide portions 21 each including the inclined surface 22 to guide the upwardly displaced wedge 19 into contact with the car guide rail 2, whereby the force with which the wedge 19 is pressed against the car guide rail 2 during descending movement of the car 3 can be increased with reliability.

    [0022] Further, each actuator portion 20 has a spring 23 that urges the wedge 19 upward, and an electromagnet 24 for displacing the wedge 19 downward against the urging force of the spring 23, thereby enabling displacement of the wedge 19 by means of a simple construction.

    Embodiment 2



    [0023] Fig. 4 is a schematic diagram showing an elevator apparatus according to Embodiment 2 not part of the present invention. Referring to Fig. 4, the car 3 has a car main body 27 provided with a car entrance 26, and a car door 28 that opens and closes the car entrance 26. Provided in the hoistway 1 is a car speed sensor 31 serving as car speed detecting means for detecting the speed of the car 3. Mounted inside the control panel 13 is an output portion 32 electrically connected to the car speed sensor 31. The battery 12 is connected to the output portion 32 through the power supply cable 14. Electric power used for detecting the speed of the car 3 is supplied from the output portion 32 to the car speed sensor 31. The output portion 32 is input with a speed detection signal from the car speed sensor 31.

    [0024] Mounted on the underside of the car 3 are a pair of safety devices 33 serving as braking means for braking the car 3. The output portion 32 and each safety device 33 are electrically connected to each other through the emergency stop wiring 17. When the speed of the car 3 is at the second overspeed, an actuation signal, which is the actuating power, is output to each safety device 33. The safety devices 33 are actuated upon input of this actuation signal.

    [0025] Fig. 5 is a front view showing the safety device 33 of Fig. 4, and Fig. 6 is a front view showing the safety device 33 of Fig. 5 that has been actuated. Referring to the figures, the safety device 33 has a wedge 34 serving as a braking member and capable of moving into and away from contact with the car guide rail 2, an actuator portion 35 connected to a lower portion of the wedge 34, and a guide portion 36 arranged above the wedge 34 and fixed to the car 3. The wedge 34 and the actuator portion 35 are capable of vertical movement with respect to the guide portion 36. As the wedge 34 is displaced upward with respect to the guide portion 36, that is, toward the guide portion 36 side, the wedge 34 is guided by the guide portion 36 into contact with the car guide rail 2.

    [0026] The actuator portion 35 has a cylindrical contact portion 37 capable of moving into and away from contact with the car guide rail 2, an actuating mechanism 38 for displacing the contact portion 37 into and away from contact with the car guide rail 2, and a support portion 39 supporting the contact portion 37 and the actuating mechanism 38. The contact portion 37 is lighter than the wedge 34 so that it can be readily displaced by the actuating mechanism 38. The actuating mechanism 38 has a movable portion 40 capable of reciprocating displacement between a contact position where the contact portion 37 is held in contact with the car guide rail 2 and a separated position where the contact portion 37 is separated from the car guide rail 2, and a drive portion 41 for displacing the movable portion 40.

    [0027] The support portion 39 and the movable portion 40 are provided with a support guide hole 42 and a movable guide hole 43, respectively. The inclination angles of the support guide hole 42 and the movable guide hole 43 with respect to the car guide rail 2 are different from each other. The contact portion 37 is slidably fitted in the support guide hole 42 and the movable guide hole 43. The contact portion 37 slides within the movable guide hole 43 according to the reciprocating displacement of the movable portion 40, and is displaced along the longitudinal direction of the support guide hole 42. As a result, the contact portion 37 is moved into and away from contact with the car guide rail 2 at an appropriate angle. When the contact portion 37 comes into contact with the car guide rail 2 as the car 3 descends, braking is applied to the wedge 34 and the actuator portion 35, displacing them toward the guide portion 36 side.

    [0028] Mounted on the upperside of the support portion 39 is a horizontal guide hole 47 extending in the horizontal direction. The wedge 34 is slidably fitted in the horizontal guide hole 47. That is, the wedge 34 is capable of reciprocating displacement in the horizontal direction with respect to the support portion 39.

    [0029] The guide portion 36 has an inclined surface 44 and a contact surface 45 which are arranged so as to sandwich the car guide rail 2 therebetween. The inclined surface 44 is inclined with respect to the car guide rail 2 such that the distance between it and the car guide rail 2 decreases with increasing proximity to its upper portion. The contact surface 45 is capable of moving into and away from contact with the car guide rail 2. As the wedge 34 and the actuator portion 35 are displaced upward with respect to the guide portion 36, the wedge 34 is displaced along the inclined surface 44. As a result, the wedge 34 and the contact surface 45 are displaced so as to approach each other, and the car guide rail 2 becomes lodged between the wedge 34 and the contact surface 45.

    [0030] Fig. 7 is a front view showing the drive portion 41 of Fig. 6. Referring to Fig. 7, the drive portion 41 has a disc spring 46 serving as an urging portion and attached to the movable portion 40, and an electromagnet 48 for displacing the movable portion 40 by an electromagnetic force generated upon supply of electric current thereto.

    [0031] The movable portion 40 is fixed to the central portion of the disc spring 46. The disc spring 46 is deformed due to the reciprocating displacement of the movable portion 40. As the disc spring 46 is deformed due to the displacement of the movable portion 40, the urging direction of the disc spring 46 is reversed between the contact position (solid line) and the separated position (broken line). The movable portion 40 is retained at the contact or separated position as it is urged by the disc spring 46. That is, the contact or separated state of the contact portion 37 with respect to the car guide rail 2 is retained by the urging of the disc spring 46.

    [0032] The electromagnet 48 has a first electromagnetic portion 49 fixed to the movable portion 40, and a second electromagnetic portion 50 opposed to the first electromagnetic portion 49. The movable portion 40 is displaceable relative to the second electromagnetic portion 50. The emergency stop wiring 17 is connected to the electromagnet 48. Upon inputting an actuation signal to the electromagnet 48, the first electromagnetic portion 4 9 and the second electromagnetic portion 50 generate electromagnetic forces so as to repel each other. That is, upon input of the actuation signal to the electromagnet 48, the first electromagnetic portion 49 is displaced away from contact with the second electromagnetic portion 50, together with the movable portion 40.

    [0033] It should be noted that for recovery after the actuation of the safety device 5, the output portion 32 outputs a recovery signal during the recovery phase. Input of the recovery signal to the electromagnet 48 causes the first electromagnetic portion 49 and the second electromagnetic portion 50 to attract each other. Otherwise, this embodiment is of the same construction as Embodiment 1.

    [0034] Next, operation is described. During normal operation, the movable portion 40 is located at the separated position, and the contact portion 37 is urged by the disc spring 46 to be separated away from contact with the car guide rail 2. With the contact portion 37 thus being separated from the car guide rail 2, the wedge 34 is separated from the guide portion 36, thus maintaining the distance between the wedge 34 and the guide portion 36.

    [0035] When the speed detected by the car speed sensor 31 reaches the first overspeed, this actuates the braking device of the hoisting machine. When the speed of the car 3 continues to rise thereafter and the speed as detected by the car speed sensor 31 reaches the second overspeed, an actuation signal is output from the output portion 32 to each safety device 33. Inputting this actuation signal to the electromagnet 48 triggers the first electromagnetic portion 49 and the second electromagnetic portion 50 to repel each other. The electromagnetic repulsion force thus generated causes the movable portion 40 to be displaced into the contact position. As this happens, the contact portion 37 is displaced into contact with the car guide rail 2. By the time the movable portion 40 reaches the contact position, the urging direction of the disc spring 46 reverses to that for retaining the movable portion 40 at the contact position. As a result, the contact portion 37 is pressed into contact with the car guide rail 2, thus braking the wedge 34 and the actuator portion 35.

    [0036] Since the car 3 and the guide portion 36 descend with no braking applied thereon, the guide portion 36 is displaced downward towards the wedge 34 and actuator 35 side. Due to this displacement, the wedge 34 is guided along the inclined surface 44, causing the car guide rail 2 to become lodged between the wedge 34 and the contact surface 45. As the wedge 34 comes into contact with the car guide rail 2, it is displaced further upward to wedge in between the car guide rail 2 and the inclined surface 44. A large frictional force is thus generated between the car guide rail 2 and the wedge 34, and between the car guide rail 2 and the contact surface 45, thus braking the car 3.

    [0037] During the recovery phase, the recovery signal is transmitted from the output portion 32 to the electromagnet 48. This causes the first electromagnetic portion 49 and the second electromagnetic portion 50 to attract each other, thus displacing the movable portion 40 to the separated position. As this happens, the contact portion 37 is displaced to be separated away from contact with the car guide rail 2. By the time the movable portion 40 reaches the separated position, the urging direction of the disc spring 46 reverses, allowing the movable portion 40 to be retained at the separated position. As the car 3 ascends in this state, the pressing contact of the wedge 34 and the contact surface 45 with the car guide rail 2 is released.

    [0038] In addition to providing the same effects as those of Embodiment 1, the above-described elevator apparatus includes the car speed sensor 31 provided in the hoistway 1 to detect the speed of the car 3. There is thereby no need to use a speed governor and a governor rope, making it possible to reduce the overall installation space for the elevator apparatus.

    [0039] Further, the actuator portion 35 has the contact portion 37 capable of moving into and away from contact with the car guide rail 2, and the actuating mechanism 38 for displacing the contact portion 37 into and away from contact with the car guide rail 2. Accordingly, by making the weight of the contact portion 37 smaller than that of the wedge 34, the drive force to be applied from the actuating mechanism 38 to the contact portion 37 can be reduced, thus making it possible to miniaturize the actuating mechanism 38. Further, the lightweight construction of the contact portion 37 allows increases in the displacement rate of the contact portion 37, thereby reducing the time required until generation of a braking force.

    [0040] Further, the drive portion 41 includes the disc spring 46 adapted to hold the movable portion 40 at the contact position or the separated position, and the electromagnet 48 capable of displacing the movable portion 40 when supplied with electric current, whereby the movable portion 40 can be reliably held at the contact or separated position by supplying electric current to the electromagnet 48 only during the displacement of the movable portion 40.

    Embodiment 3



    [0041] Fig. 8 is a schematic diagram showing an elevator apparatus according to Embodiment 3 not part of the present invention. Referring to Fig. 8, provided at the car entrance 26 is a door closed sensor 58, which serves as a door closed detecting means for detecting the open or closed state of the car door 28. An output portion 59 mounted on the control panel 13 is connected to the door closed sensor 58 through a control cable. Further, the car speed sensor 31 is electrically connected to the output portion 59. A speed detection signal from the car speed sensor 31 and an open/closed detection signal from the door closed sensor 58 are input to the output portion 59. On the basis of the speed detection signal and the open/closed detection signal thus input, the output portion 59 can determine the speed of the car 3 and the open or closed state of the car entrance 26.

    [0042] The output portion 59 is connected to each safety device 33 through the emergency stop wiring 17. On the basis of the speed detection signal from the car speed sensor 31 and the opening/closing detection signal from the door closed sensor 58, the output portion 59 outputs an actuation signal when the car 3 has descended with the car entrance 26 being open. The actuation signal is transmitted to the safety device 33 through the emergency stop wiring 17. Otherwise, this embodiment is of the same construction as Embodiment 2.

    [0043] In the elevator apparatus as described above, the car speed sensor 31 that detects the speed of the car 3, and the door closed sensor 58 that detects the open or closed state of the car door 28 are electrically connected to the output portion 59, and the actuation signal is output from the output portion 59 to the safety device 33 when the car 3 has descended with the car entrance 26 being open, thereby preventing the car 3 from descending with the car entrance 26 being open.

    [0044] It should be noted that safety devices vertically reversed from the safety devices 33 may be mounted to the car 3. This construction also makes it possible to prevent the car 3 from ascending with the car entrance 26 being open.

    Embodiment 4



    [0045] Fig. 9 is a schematic diagram showing an elevator apparatus according to Embodiment 4 not part of the present invention. Referring to Fig. 9, passed through the main rope 4 is a break detection lead wire 61 serving as a rope break detecting means for detecting a break in the rope 4. A weak current flows through the break detection lead wire 61. The presence of a break in the main rope 4 is detected on the basis of the presence or absence of this weak electric current passing therethough. An output portion 62 mounted on the control panel 13 is electrically connected to the break detection lead wire 61. When the break detection lead wire 61 breaks, a rope break signal, which is an electric current cut-off signal of the break detection lead wire 61, is input to the output portion 62. The car speed sensor 31 is also electrically connected to the output portion 62.

    [0046] The output portion 62 is connected to each safety device 33 through the emergency stop wiring 17. If the main rope 4 breaks, the output portion 62 outputs an actuation signal on the basis of the speed detection signal from the car speed sensor 31 and the rope break signal from the break detection lead wire 61. The actuation signal is transmitted to the safety device 33 through the emergency stop wiring 17. Otherwise, this embodiment is of the same construction as Embodiment 2.

    [0047] In the elevator apparatus as described above, the car speed sensor 31 which detects the speed of the car 3 and the break detection lead wire 61 which detects a break in the main rope 4 are electrically connected to the output portion 62, and, when the main rope 4 breaks, the actuation signal is output from the output portion 62 to the safety device 33. By thus detecting the speed of the car 3 and detecting a break in the main rope 4, braking can be more reliably applied to a car 3 that is descending at abnormal speed.

    [0048] While in the above example the method of detecting the presence or absence of an electric current passing through the break detection lead wire 61, which is passed through the main rope 4, is employed as the rope break detecting means, it is also possible to employ a method of, for example, measuring changes in the tension of the main rope 4. In this case, a tension measuring instrument is installed on the rope fastening.

    Embodiment 5



    [0049] Fig. 10 is a schematic diagram showing an elevator apparatus according to Embodiment 5 not part of the present invention. Referring to Fig. 10, provided in the hoistway 1 is a car position sensor 65 serving as car position detecting means for detecting the position of the car 3. The car position sensor 65 and the car speed sensor 31 are electrically connected to an output portion 66 mounted on the control panel 13. The output portion 66 has a memory portion 67 storing a control pattern containing information on the position, speed, acceleration/deceleration, floor stops, etc., of the car 3 during normal operation. Inputs to the output portion 66 are a speed detection signal from the car speed sensor 31 and a car position signal from the car position sensor 65.

    [0050] The output portion 66 is connected to the safety device 33 through the emergency stop wiring 17. The output portion 66 compares the speed and position (actual measured values) of the car 3 based on the speed detection signal and the car position signal with the speed and position (set values) of the car 3 based on the control pattern stored in the memory portion 67. The output portion 66 outputs an actuation signal to the safety device 33 when the deviation between the actual measured values and the set values exceeds a predetermined threshold. Herein, the predetermined threshold refers to the minimum deviation between the actual measurement values and the set values required for bringing the car 3 to a halt through normal braking without the car 3 colliding against an end portion of the hoistway 1. Otherwise, this embodiment is of the same construction as Embodiment 2.

    [0051] In the elevator apparatus as described above, the output portion 66 outputs the actuation signal when the deviation between the actual measurement values from each of the car speed sensor 31 and the car position sensor 65 and the set values based on the control pattern exceeds the predetermined threshold, making it possible to prevent collision of the car 3 against the end portion of the hoistway 1.

    Embodiment 6



    [0052] Fig. 11 is a schematic diagram showing an elevator apparatus according to Embodiment 6 not part of the present invention. Referring to Fig. 11, arranged within the hoistway 1 are an upper car 71 that is a first car and a lower car 72 that is a second car located below the upper car 71. The upper car 71 and the lower car 72 are guided by the car guide rail 2 as they ascend and descend in the hoistway 1. Installed at the upper end portion of the hoistway 1 are a first hoisting machine (not shown) for raising and lowering the upper car 71 and an upper-car counterweight (not shown), and a second hoisting machine (not shown) for raising and lowering the lower car 72 and a lower-car counterweight (not shown). A first main rope (not shown) is wound around the drive sheave of the first hoisting machine, and a second main rope (not shown) is wound around the drive sheave of the second hoisting machine. The upper car 71 and the upper-car counterweight are suspended by the first main rope, and the lower car 72 and the lower-car counterweight are suspended by the second main rope.

    [0053] In the hoistway 1, there are provided an upper-car speed sensor 73 and a lower-car speed sensor 74 respectively serving as car speed detecting means for detecting the speed of the upper car 71 and the speed of the lower car 72. Also provided in the hoistway 1 are an upper-car position sensor 75 and a lower-car position sensor 76 respectively serving as car position detecting means for detecting the position of the upper car 71 and the position of the lower car 72.

    [0054] It should be noted that car operation detecting means includes the upper-car speed sensor 73, the lower-car sped sensor 74, the upper-car position sensor 75, and the lower-car position sensor 76.

    [0055] Mounted on the underside of the upper car 71 are upper-car safety devices 77 serving as braking means of the same construction as that of the safety devices 33 used in Embodiment 2. Mounted on the underside of the lower car 72 are lower-car safety devices 78 serving as braking means of the same construction as that of the upper-car safety devices 77.

    [0056] An output portion 79 is mounted inside the control panel 13. The upper-car speed sensor 73, the lower-car speed sensor 74, the upper-car position sensor 75, and the lower-car position sensor 76 are electrically connected to the output portion 79. Further, the battery 12 is connected to the output portion 79 through the power supply cable 14. An upper-car speed detection signal from the upper-car speed sensor 73, a lower-car speed detection signal from the lower-car speed sensor 74, an upper-car position detecting signal from the upper-car position sensor 75, and a lower-car position detection signal from the lower-car position sensor 76 are input to the output portion 79. That is, information from the car operation detecting means is input to the output portion 79.

    [0057] The output portion 79 is connected to the upper-car safety device 77 and the lower-car safety device 78 through the emergency stop wiring 17. Further, on the basis of the information from the car operation detecting means, the output portion 79 predicts whether or not the upper car 71 or the lower car 72 will collide against an end portion of the hoistway 1 and whether or not collision will occur between the upper car 71 and the lower car 72; when it is predicted that such collision will occur, the output portion 79 outputs an actuation signal to each the upper-car safety devices 77 and the lower-car safety devices 78. The upper-car safety devices 77 and the lower-car safety devices 78 are each actuated upon input of this actuation signal.

    [0058] It should be noted that a monitoring portion includes the car operation detecting means and the output portion 79. The running states of the upper car 71 and the lower car 72 are monitored by the monitoring portion. Otherwise, this embodiment is of the same construction as Embodiment 2.

    [0059] Next, operation is described. When input with the information from the car operation detecting means, the output portion 79 predicts whether or not the upper car 71 and the lower car 72 will collide against an end portion of the hoistway 1 and whether or not collision between the upper car and the lower car 72 will occur. For example, when the output portion 79 predicts that collision will occur between the upper car 71 and the lower car 72 due to a break in the first main rope suspending the upper car 71, the output portion 79 outputs an actuation signal to each the upper-car safety devices 77 and the lower-car safety devices 78. The upper-car safety devices 77 and the lower-car safety devices 78 are thus actuated, braking the upper car 71 and the lower car 72.

    [0060] In the elevator apparatus as described above, the monitoring portion has the car operation detecting means for detecting the actual movements of the upper car 71 and the lower car 72 as they ascend and descend in the same hoistway 1, and the output portion 79 which predicts whether or not collision will occur between the upper car 71 and the lower car 72 on the basis of the information from the car operation detecting means and, when it is predicted that the collision will occur, outputs the actuation signal to each of the upper-car safety devices 77 and the lower-car emergency devices 78. Accordingly, even when the respective speeds of the upper car 71 and the lower car 72 have not reached the set overspeed, the upper-car safety devices 77 and the lower-car emergency devices 78 can be actuated when it is predicted that collision will occur between the upper car 71 and the lower car 72, thereby making it possible to avoid a collision between the upper car 71 and the lower car 72.

    [0061] Further, the car operation detecting means has the upper-car speed sensor 73, the lower-car speed sensor 74, the upper-car position sensor 75, and the lower-car position sensor 76, the actual movements of the upper car 71 and the lower car 72 can be readily detected by means of a simple construction.

    [0062] While in the above-described example the output portion 79 is mounted inside the control panel 13, an output portion 79 may be mounted on each of the upper car 71 and the lower car 72. In this case, as shown in Fig. 12, the upper-car speed sensor 73, the lower-car speed sensor 74, the upper-car position sensor 75, and the lower-car position sensor 76 are electrically connected to each of the output portions 79 mounted on the upper car 71 and the lower car 72.

    [0063] While in the above-described example the output portions 79 outputs the actuation signal to each the upper-car safety devices 77 and the lower-car safety devices 78, the output portion 79 may, in accordance with the information from the car operation detecting means, output the actuation signal to only one of the upper-car safety device 77 and the lower-car safety device 78. In this case, in addition to predicting whether or not collision will occur between the upper car 71 and the lower car 72, the output portions 79 also determine the presence of an abnormality in the respective movements of the upper car 71 and the lower car 72. The actuation signal is output from an output portion 79 to only the safety device mounted on the car which is moving abnormally.

    Embodiment 7



    [0064] Fig. 13 is a schematic diagram showing an elevator apparatus according to Embodiment 7 not part of the present invention. Referring to Fig. 13, an upper-car output portion 81 serving as an output portion is mounted on the upper car 71, and a lower-car output portion 82 serving as an output portion is mounted on the lower car 72. The upper-car speed sensor 73, the upper-car position sensor 75, and the lower-car position sensor 76 are electrically connected to the upper-car output portion 81. The lower-car speed sensor 74, the lower-car position sensor 76, and the upper-car position sensor 75 are electrically connected to the lower-car output portion 82.

    [0065] The upper-car output portion 81 is electrically connected to the upper-car safety devices 77 through an upper-car emergency stop wiring 83 serving as transmission means installed on the upper car 71. Further, the upper-car output portion 81 predicts, on the basis of information (hereinafter referred to as "upper-car detection information" in this embodiment) from the upper-car speed sensor 73, the upper-car position sensor 75, and the lower-car position sensor 76, whether or not the upper car 71 will collide against the lower car 72, and outputs an actuation signal to the upper-car safety devices 77 upon predicting that a collision will occur. Further, when input with the upper-car detection information, the upper-car output portion 81 predicts whether or not the upper car 71 will collide against the lower car 72 on the assumption that the lower car 72 is running toward the upper car 71 at its maximum normal operation speed.

    [0066] The lower-car output portion 82 is electrically connected to the lower-car safety devices 78 through a lower-car emergency stop wiring 84 serving as transmission means installed on the lower car 72. Further, the lower-car output portion 82 predicts, on the basis of information (hereinafter referred to as "lower-car detection information" in this embodiment) from the lower-car speed sensor 74, the lower-car position sensor 76, and the upper-car position sensor 75, whether or not the lower car 72 will collide against the upper car 71, and outputs an actuation signal to the lower-car safety devices 78 upon predicting that a collision will occur. Further, when input with the lower-car detection information, the lower-car output portion 82 predicts whether or not the lower car 72 will collide against the upper car 71 on the assumption that the upper car 71 is running toward the lower car 72 at its maximum normal operation speed.

    [0067] Normally, the operations of the upper car 71 and the lower car 72 are controlled such that they are sufficiently spaced away from each other so that the upper-car safety devices 77 and the lower-car safety devices 78 do not actuate. Otherwise, this embodiment is of the same construction as Embodiment 6.

    [0068] Next, operation is described. For instance, when, due to a break in the first main rope suspending the upper car 71, the upper car 71 falls toward the lower car 72, the upper-car output portion 81 and the lower-car output portion 82 both predict the impending collision between the upper car 71 and the lower car 72. As a result, the upper-car output portion 81 and the lower-car output portion 82 each output an actuation signal to the upper-car safety devices 77 and the lower-car safety devices 78, respectively. This actuates the upper-car safety devices 77 and the lower-car safety devices 78; thus braking the upper car 71 and the lower car 72.

    [0069] In addition to providing the same effects as those of Embodiment 6, the above-described elevator apparatus, in which the upper-car speed sensor 73 is electrically connected to only the upper-car output portion 81 and the lower-car speed sensor 74 is electrically connected to only the lower-car output portion 82, obviates the need to provide electrical wiring between the upper-car speed sensor 73 and the lower-car output portion 82 and between the lower-car speed sensor 74 and the upper-car output portion 81, making it possible to simplify the electrical wiring installation.

    Embodiment 8



    [0070] Fig. 14 is a schematic diagram showing an elevator apparatus according to Embodiment 8 not part of the present invention. Referring to Fig. 14, mounted to the upper car 71 and the lower car 72 is an inter-car distance sensor 91 serving as inter-car distance detecting means for detecting the distance between the upper car 71 and the lower car 72. The inter-car distance sensor 91 includes a laser irradiation portion mounted on the upper car 71 and a reflection portion mounted on the lower car 72. The distance between the upper car 71 and the lower car 72 is obtained by the inter-car distance sensor 91 based on the reciprocation time of laser light between the laser irradiation portion and the reflection portion.

    [0071] The upper-car speed sensor 73, the lower-car speed sensor 74, the upper-car position sensor 75, and the inter-car distance sensor 91 are electrically connected to the upper-car output portion 81. The upper-car speed sensor 73, the lower-car speed sensor 74, the lower-car position sensor 76, and the inter-car distance sensor 91 are electrically connected to the lower-car output portion 82.

    [0072] The upper-car output portion 81 predicts, on the basis of information (hereinafter referred to as "upper-car detection information" in this embodiment) from the upper-car speed sensor 73, the lower-car speed sensor 74, the upper-car position sensor 75, and the inter-car distance sensor 91, whether or not the upper car 71 will collide against the lower car 72, and outputs an actuation signal to the upper-car safety devices 77 upon predicting that a collision will occur.

    [0073] The lower-car output portion 82 predicts, on the basis of information (hereinafter referred to as "lower-car detection information" in this embodiment) from the upper-car speed sensor 73, the lower-car speed sensor 74, the lower-car position sensor 76, and the inter-car distance sensor 91, whether or not the lower car 72 will collide against the upper car 71, and outputs an actuation signal to the lower-car safety device 78 upon predicting that a collision will occur. Otherwise, this embodiment is of the same construction as Embodiment 7.

    [0074] In the elevator apparatus as described above, the output portion 79 predicts whether or not a collision will occur between the upper car 71 and the lower car 72 based on the information from the inter-car distance sensor 91, making it possible to predict with improved reliability whether or not a collision will occur between the upper car 71 and the lower car 72.

    [0075] It should be noted that the door closed sensor 58 of Embodiment 3 may be applied to the elevator apparatus as described in Embodiments 6 through 8 so that the output portion is input with the open/closed detection signal. It is also possible to apply the break detection lead wire 61 of Embodiment 4 here as well so that the output portion is input with the rope break signal.

    [0076] While the drive portion in Embodiments 2 through 8 described above is driven by utilizing the electromagnetic repulsion force or the electromagnetic attraction force between the first electromagnetic portion 49 and the second electromagnetic portion 50, the drive portion may be driven by utilizing, for example, an eddy current generated in a conductive repulsion plate. In this case, as shown in Fig. 15, a pulsed current is supplied as an actuation signal to the electromagnet 48, and the movable portion 40 is displaced through the interaction between an eddy current generated in a repulsion plate 51 fixed to the movable portion 40 and the magnetic field from the electromagnet 48.

    [0077] While in Embodiments 2 through 8 described above the car speed detecting means is provided in the hoistway 1, it may also be mounted on the car. In this case, the speed detection signal from the car speed detecting means is transmitted to the output portion through the control cable.

    Embodiment 9



    [0078] Fig. 16 is a plan view showing a safety device according to Embodiment 9 not part of the present invention. Here, a safety device 155 has the wedge 34, an actuator portion 156 connected to a lower portion of the wedge 34, and the guide portion 36 arranged above the wedge 34 and fixed to the car 3. The actuator portion 156 is vertically movable with respect to the guide portion 36 together with the wedge 34.

    [0079] The actuator portion 156 has a pair of contact portions 157 capable of moving into and away from contact with the car guide rail 2, a pair of link members 158a, 158b each connected to one of the contact portions 157, an actuating mechanism 159 for displacing the link member 158a relative to the other link member 158b such that the respective contact portions 157 move into and away from contact with the car guide rail 2, and a support portion 160 supporting the contact portions 157, the link members 158a, 158b, and the actuating mechanism 159. A horizontal shaft 170, which passes through the wedge 34, is fixed to the support portion 160. The wedge 34 is capable of reciprocating displacement in the horizontal direction with respect to the horizontal shaft 170.

    [0080] The linkmembers 158a, 158b cross each other at a portion between one end to the other end portion thereof. Further, provided to the support portion 160 is a connection member 161 which pivotably connects the link member 158a, 158b together at the portion where the link members 158a, 158b cross each other. Further, the link member 158a is provided so as to be pivotable with respect to the other link member 158b about the connection member 161.

    [0081] As the respective other end portions of the link member 158a, 158b are displaced so as to approach each other, each contact portion 157 is displaced into contact with the car guide rail 2. Likewise, as the respective other end portions of the link member 158a, 158b are displaced so as to separate away from each other, each contact portion 157 is displaced away from the car guide rail 2.

    [0082] The actuating mechanism 159 is arranged between the respective other end portions of the link members 158a, 158b. Further, the actuating mechanism 159 is supported by each of the link members 158a, 158b. Further, the actuating mechanism 159 includes a rod-like movable portion 162 connected to the link member 158a, and a drive portion 163 fixed to the other linkmember 158b and adapted to displace the movable portion 162 in a reciprocating manner. The actuating mechanism 159 is pivotable about the connection member 161 together with the link members 158a, 158b.

    [0083] The movable portion 162 has a movable iron core 164 accommodated within the drive portion 163, and a connecting rod 165 connecting the movable iron core 164 and the link member 158b to each other. Further, the movable portion 162 is capable of reciprocating displacement between a contact position where the contact portions 157 come into contact with the car guide rail 2 and a separated position where the contact portions 157 are separated away from contact with the car guide rail 2.

    [0084] The drive portion 163 has a stationary iron core 166 including a pair of regulating portions 166a and 166b regulating the displacement of the movable iron core 164 and a side wall portion 166c that connects the regulating members 166a, 166b to each other and, surrounding the movable iron core 164, a first coil 167 which is accommodated within the stationary iron core 166 and which, when supplied with electric current, causes the movable iron core 164 to be displaced into contact with the regulating portion 166a, a second coil 168 which is accommodated within the stationary iron core 166 and which, when supplied with electric current, causes the movable iron core 164 to be displaced into contact with the other regulating portion 166b, and an annular permanent magnet 169 arranged between the first coil 167 and the second coil 168.

    [0085] The regulating member 166a is so arranged that the movable iron core 164 abuts on the regulating member 166a when the movable portion 162 is at the separated position. Further, the other regulating member 166b is so arranged that the movable iron core 164 abuts on the regulating member 166b when the movable portion 162 is at the contact position.

    [0086] The first coil 167 and the second coil 168 are annular electromagnets that surround the movable portion 162. Further, the first coil 167 is arranged between the permanent magnet 169 and the regulating portion 166a, and the second coil 168 is arranged between the permanent magnet 169 and the other regulating portion 166b.

    [0087] With the movable iron core 164 abutting on the regulating portion 166a, a space serving as a magnetic resistance exists between the movable iron core 164 and the other regulating member 166b, with the result that the amount of magnetic flux generated by the permanent magnet 169 becomes larger on the first coil 167 side than on the second coil 168 side. Thus, the movable iron core 164 is retained in position while still abutting on the regulating member 166a.

    [0088] Further, with the movable iron core 164 abutting on the other regulating portion 166b, a space serving as a magnetic resistance exists between the movable iron core 164 and the regulating member 166a, with the result that the amount of magnetic flux generated by the permanent magnet 169 becomes larger on the second coil 168 side than on the first coil 167 side. Thus, the movable iron core 164 is retained in position while still abutting on the other regulating member 166b.

    [0089] Electric power serving as an actuation signal from the output portion 32 can be input to the second coil 168. When input with the actuation signal, the second coil 168 generates a magnetic flux acting against the force that keeps the movable iron core 164 in abutment with the regulating portion 166a. Further, electric power serving as a recovery signal from the output portion 32 can be input to the first coil 167. When input with the recovery signal, the first coil 167 generates a magnetic flux acting against the force that keeps the movable iron core 164 in abutment with the other regulating portion 166b.

    [0090] Otherwise, this embodiment is of the same construction as Embodiment 2.

    [0091] Next, operation is described. During normal operation, the movable portion 162 is located at the separated position, with the movable iron core 164 being held in abutment on the regulating portion 166a by the holding force of the permanent magnet 169. With the movable iron core 164 abutting on the regulating portion 166a, the wedge 34 is maintained at a spacing from the guide portion 36 and separated away from the car guide rail 2.

    [0092] Thereafter, as in Embodiment 2, by outputting an actuation signal to each safety device 155 from the output portion 32, electric current is supplied to the second coil 168. This generates a magnetic flux around the second coil 168, which causes the movable iron core 164 to be displaced toward the other regulating portion 166b, that is, from the separated position to the contact position. As this happens, the contact portions 157 are displaced so as to approach each other, coming into contact with the car guide rail 2. Braking is thus applied to the wedge 34 and the actuator portion 155.

    [0093] Thereafter, the guide portion 36 continues its descent, thus approaching the wedge 34 and the actuator portion 155. As a result, the wedge 34 is guided along the inclined surface 44, causing the car guide rail 2 to be held between the wedge 34 and the contact surface 45. Thereafter, the car 3 is braked through operations identical to those of Embodiment 2.

    [0094] During the recovery phase, a recovery signal is transmitted from the output portion 32 to the first coil 167. As a result, a magnetic flux is generated around the first coil 167, causing the movable iron core 164 to be displaced from the contact position to the separated position. Thereafter, the press contact of the wedge 34 and the contact surface 45 with the car guide rail 2 is released in the same manner as in Embodiment 2.

    [0095] In the elevator apparatus as described above, the actuating mechanism 159 causes the pair of contact portions 157 to be displaced through the intermediation of the link members 158a, 158b, whereby, in addition to the same effects as those of Embodiment 2, it is possible to reduce the number of actuating mechanisms 159 required for displacing the pair of contact portions 157.

    Embodiment 10



    [0096] Fig. 17 is a partially cutaway side view showing a safety device according to Embodiment 10 not part of the present invention. Referring to Fig. 17, a safety device 175 has the wedge 34, an actuator portion 176 connected to a lower portion of the wedge 34, and the guide portion 36 arranged above the wedge 34 and fixed to the car 3.

    [0097] The actuator portion 176 has the actuating mechanism 159 constructed in the same manner as that of Embodiment 9, and a link member 177 displaceable through displacement of the movable portion 162 of the actuating mechanism 159.

    [0098] The actuating mechanism 159 is fixed to a lower portion of the car 3 so as to allow reciprocating displacement of the movable portion 162 in the horizontal direction with respect to the car 3. The link member 177 is pivotably provided to a stationary shaft 180 fixed to a lower portion of the car 3. The stationary shaft 180 is arranged below the actuating mechanism 159.

    [0099] The link member 177 has a first link portion 178 and a second link portion 179 which extend in different directions from the stationary shaft 180 taken as the start point. The overall configuration of the link member 177 is substantially a prone shape. That is, the second link portion 179 is fixed to the first link portion 178, and the first link portion 178 and the second link portion 179 are integrally pivotable about the stationary shaft 180.

    [0100] The length of the first link portion 178 is larger than that of the second link portion 179. Further, an elongate hole 182 is provided at the distal end portion of the first link portion 178. A slide pin 183, which is slidably passed through the elongate hole 182, is fixed to a lower portion of the wedge 34. That is, the wedge 34 is slidably connected to the distal end portion of the first link portion 178. The distal end portion of the movable portion 162 is pivotably connected to the distal end portion of the second link portion 179 through the intermediation of a connecting pin 181.

    [0101] The link member 177 is capable of reciprocating movement between a separated position where it keeps the wedge 34 separated away from and below the guide portion 36 and an actuating position where it causes the wedge 34 to wedge in between the car guide rail and the guide portion 36. The movable portion 162 is projected from the drive portion 163 when the link member 177 is at the separated position, and it is retracted into the drive portion 163 when the link member is at the actuating position.

    [0102] Next, operation is described. During normal operation, the link member 177 is located at the separated position due to the retracting motion of the movable portion 162 into the drive portion 163. At this time, the wedge 34 is maintained at a spacing from the guide portion 36 and separated away from the car guide rail.

    [0103] Thereafter, in the same manner as in Embodiment 2, an actuation signal is output from the output portion 32 to each safety device 175, causing the movable portion 162 to advance. As a result, the link member 177 is pivoted about the stationary shaft 180 for displacement into the actuating position. This causes the wedge 34 to come into contact with the guide portion 36 and the car guide rail, wedging in between the guide portion 36 and the car guide rail. Braking is thus applied to the car 3.

    [0104] During the recovery phase, a recovery signal is transmitted from the output portion 32 to each safety device 175, causing the movable portion 162 to be urged in the retracting direction. The car 3 is raised in this state, thus releasing the wedging of the wedge 34 in between the guide portion 36 and the car guide rail.

    [0105] The above-described elevator apparatus also provides the same effects as those of Embodiment 2.

    Embodiment 11



    [0106] Fig. 18 is a schematic diagram showing an elevator apparatus according to Embodiment 11 not part of the present invention. In Fig 18, a hoisting machine 101 serving as a driving device and a control panel 102 are provided in an upper portion within the hoistway 1. The control panel 102 is electrically connected to the hoisting machine 101 and controls the operation of the elevator. The hoisting machine 101 has a driving device main body 103 including a motor and a driving sheave 104 rotated by the driving device main body 103. A plurality of main ropes 4 are wrapped around the sheave 104. The hoisting machine 101 further includes a deflector sheave 105 around which each main rope 4 is wrapped, and a hoisting machine braking device (deceleration braking device) 106 for braking the rotation of the drive sheave 104 to decelerate the car 3. The car 3 and a counter weight 107 are suspended in the hoistway 1 by means of the main ropes 4. The car 3 and the counterweight 107 are raised and lowered in the hoistway 1 by driving the hoisting machine 101.

    [0107] The safety device 33, the hoisting machine braking device 106, and the control panel 102 are electrically connected to a monitor device 108 that constantly monitors the state of the elevator. A car position sensor 109, a car speed sensor 110, and a car acceleration sensor 111 are also electrically connected to the monitor device 108. The car position sensor 109, the car speed sensor 110, and the car acceleration sensor 111 respectively serve as a car position detecting portion for detecting the speed of the car 3, a car speed detecting portion for detecting the speed of the car 3, and a car acceleration detecting portion for detecting the acceleration of the car 3. The car position sensor 109, the car speed sensor 110, and the car acceleration sensor 111 are provided in the hoistway 1.

    [0108] Detection means 112 for detecting the state of the elevator includes the car position sensor 109, the car speed sensor 110, and the car acceleration sensor 111. Any of the following may be used for the car position sensor 109: an encoder that detects the position of the car 3 by measuring the amount of rotation of a rotary member that rotates as the car 3 moves; a linear encoder that detects the position of the car 3 by measuring the amount of linear displacement of the car 3; an optical displacement measuring device which includes, for example, a projector and a photodetector provided in the hoistway 1 and a reflection plate provided in the car 3, and which detects the position of the car 3 by measuring how long it takes for light projected from the projector to reach the photodetector.

    [0109] The monitor device 108 includes a memory portion 113 and an output portion (calculation portion) 114. The memory portion 113 stores in advance a variety of (in this embodiment, two) abnormality determination criteria (set data) serving as criteria for judging whether or not there is an abnormality in the elevator. The output portion 114 detects whether or not there is an abnormality in the elevator based on information from the detection means 112 and the memory portion 113. The two kinds of abnormality determination criteria stored in the memory portion 113 in this embodiment are car speed abnormality determination criteria relating to the speed of the car 3 and car acceleration abnormality determination criteria relating to the acceleration of the car 3.

    [0110] Fig. 19 is a graph showing the car speed abnormality determination criteria stored in the memory portion 113 of Fig. 18. In Fig. 19, an ascending/descending section of the car 3 in the hoistway 1 (a section between one terminal floor and an other terminal floor) includes acceleration/deceleration sections and a constant speed section located between the acceleration/deceleration sections. The car 3 accelerates/decelerates in the acceleration/deceleration sections respectively located in the vicinity of the one terminal floor and the other terminal floor. The car 3 travels at a constant speed in the constant speed section.

    [0111] The car speed abnormality determination criteria has three detection patterns each associated with the position of the car 3. That is, a normal speed detection pattern (normal level) 115 that is the speed of the car 3 during normal operation, a first abnormal speed detection pattern (first abnormal level) 116 having a larger value than the normal speed detection pattern 115, and a second abnormal speed detection pattern (second abnormal level) 117 having a larger value than the first abnormal speed detection pattern 116 are set, each in association with the position of the car 3.

    [0112] The normal speed detection pattern 115, the first abnormal speed detection pattern 116, and a second abnormal speed detection pattern 117 are set so as to have a constant value in the constant speed section, and to have a value continuously becoming smaller toward the terminal floor in each of the acceleration and deceleration sections. The difference in value between the first abnormal speed detection pattern 116 and the normal speed detection pattern 115, and the difference in value between the second abnormal speed detection pattern 117 and the first abnormal speed detection pattern 116, are set to be substantially constant at all locations in the ascending/descending section.

    [0113] Fig. 20 is a graph showing the car acceleration abnormality determination criteria stored in the memory portion 113 of Fig. 18. In Fig. 20, the car acceleration abnormality determination criteria has three detection patterns each associated with the position of the car 3. That is, a normal acceleration detection pattern (normal level) 118 that is the acceleration of the car 3 during normal operation, a first abnormal acceleration detection pattern (first abnormal level) 119 having a larger value than the normal acceleration detection pattern 118, and a second abnormal acceleration detection pattern (second abnormal level) 120 having a larger value than the first abnormal acceleration detection pattern 119 are set, each in association with the position of the car 3.

    [0114] The normal acceleration detection pattern 118, the first abnormal acceleration detection pattern 119, and the second abnormal acceleration detection pattern 120 are each set so as to have a value of zero in the constant speed section, a positive value in one of the acceleration/deceleration section, and a negative value in the other acceleration/deceleration section. The difference in value between the first abnormal acceleration detection pattern 119 and the normal acceleration detection pattern 118, and the difference in value between the second abnormal acceleration detection pattern 120 and the first abnormal acceleration detection pattern 119, are set to be substantially constant at all locations in the ascending/descending section.

    [0115] That is, the memory portion 113 stores the normal speed detection pattern 115, the first abnormal speed detection pattern 116, and the second abnormal speed detection pattern 117 as the car speed abnormality determination criteria, and stores the normal acceleration detection pattern 118, the first abnormal acceleration detection pattern 119, and the second abnormal acceleration detection pattern 120 as the car acceleration abnormality determination criteria.

    [0116] The safety device 33, the control panel 102, the hoisting machine braking device 106, the detection means 112, and the memory portion 113 are electrically connected to the output portion 114. Further, a position detection signal, a speed detection signal, and an acceleration detection signal are input to the output portion 114 continuously over time from the car position sensor 109, the car speed sensor 110, and the car acceleration sensor 111. The output portion 114 calculates the position of the car 3 based on the input position detection signal. The output portion 114 also calculates the speed of the car 3 and the acceleration of the car 3 based on the input speed detection signal and the input acceleration detection signal, respectively, as a variety of (in this example, two) abnormality determination factors.

    [0117] The output portion 114 outputs an actuation signal (trigger signal) to the hoisting machine braking device 106 when the speed of the car 3 exceeds the first abnormal speed detection pattern 116, or when the acceleration of the car 3 exceeds the first abnormal acceleration detection pattern 119. At the same time, the output portion 114 outputs a stop signal to the control panel 102 to stop the drive of the hoisting machine 101. When the speed of the car 3 exceeds the second abnormal speed detection pattern 117, or when the acceleration of the car 3 exceeds the second abnormal acceleration detection pattern 120, the output portion 114 outputs an actuation signal to the hoisting machine braking device 106 and the safety device 33. That is, the output portion 114 determines to which braking means it should output the actuation signals according to the degree of the abnormality in the speed and the acceleration of the car 3.

    [0118] Otherwise, this embodiment is of the same construction as Embodiment 2.

    [0119] Next, operation is described. When the position detection signal, the speed detection signal, and the acceleration detection signal are input to the output portion 114 from the car position sensor 109, the car speed sensor 110, and the car acceleration sensor 111, respectively, the output portion 114 calculates the position, the speed, and the acceleration of the car 3 based on the respective detection signals thus input. After that, the output portion 114 compares the car speed abnormality determination criteria and the car acceleration abnormality determination criteria obtained from the memory portion 113 with the speed and the acceleration of the car 3 calculated based on the respective detection signals input. Through this comparison, the output portion 114 detects whether or not there is an abnormality in either the speed or the acceleration of the car 3.

    [0120] During normal operation, the speed of the car 3 has approximately the same value as the normal speed detection pattern, and the acceleration of the car 3 has approximately the same value as the normal acceleration detection pattern. Thus, the output portion 114 detects that there is no abnormality in either the speed or the acceleration of the car 3, and normal operation of the elevator continues.

    [0121] When, for example, the speed of the car 3 abnormally increases and exceeds the first abnormal speed detection pattern 116 due to some cause, the output portion 114 detects that there is an abnormality in the speed of the car 3. Then, the output portion 114 outputs an actuation signal and a stop signal to the hoisting machine braking device 106 and the control panel 102, respectively. As a result, the hoisting machine 101 is stopped, and the hoisting machine braking device 106 is operated to brake the rotation of the drive sheave 104.

    [0122] When the acceleration of the car 3 abnormally increases and exceeds the first abnormal acceleration set value 119, the output portion 114 outputs an actuation signal and a stop signal to the hoisting machine braking device 106 and the control panel 102, respectively, thereby braking the rotation of the drive sheave 104.

    [0123] If the speed of the car 3 continues to increase after the actuation of the hoisting machine braking device 106 and exceeds the second abnormal speed set value 117, the output portion 114 outputs an actuation signal to the safety device 33 while still outputting the actuation signal to the hoisting machine braking device 106. Thus, the safety device 33 is actuated and the car 3 is braked through the same operation as that of Embodiment 2.

    [0124] Further, when the acceleration of the car 3 continues to increase after the actuation of the hoisting machine braking device 106, and exceeds the second abnormal acceleration set value 120, the output portion 114 outputs an actuation signal to the safety device 33 while still outputting the actuation signal to the hoisting machine braking device 106. Thus, the safety device 33 is actuated.

    [0125] With such an elevator apparatus, the monitor device 108 obtains the speed of the car 3 and the acceleration of the car 3 based on the information from the detection means 112 for detecting the state of the elevator. When the monitor device 108 judges that there is an abnormality in the obtained speed of the car 3 or the obtained acceleration of the car 3, the monitor device 108 outputs an actuation signal to at least one of the hoisting machine braking device 106 and the safety device 33. That is, judgment of the presence or absence of an abnormality is made by the monitor device 108 separately for a variety of abnormality determination factors such as the speed of the car and the acceleration of the car. Accordingly, an abnormality in the elevator can be detected earlier and more reliably. Therefore, it takes a shorter time for the braking force on the car 3 to be generated after occurrence of an abnormality in the elevator.

    [0126] Further, the monitor device 108 includes the memory portion 113 that stores the car speed abnormality determination criteria used for judging whether or not there is an abnormality in the speed of the car 3, and the car acceleration abnormality determination criteria used for judging whether or not there is an abnormality in the acceleration of the car 3. Therefore, it is easy to change the judgment criteria used for judging whether or not there is an abnormality in the speed and the acceleration of the car 3, respectively, allowing easy adaptation to design changes or the like of the elevator.

    [0127] Further, the following patterns are set for the car speed abnormality determination criteria: the normal speed detection pattern 115, the first abnormal speed detection pattern 116 having a larger value than the normal speed detection pattern 115, and the second abnormal speed detection pattern 117 having a larger value than the first abnormal speed detection pattern 116. When the speed of the car 3 exceeds the first abnormal speed detection pattern 116, the monitor device 108 outputs an actuation signal to the hoisting machine braking device 106,and when the speed of the car 3 exceeds the second abnormal speed detection pattern 117, the monitor device 108 outputs an actuation signal to the hoisting machine braking device 106 and the safety device 33. Therefore, the car 3 can be braked stepwise according to the degree of this abnormality in the speed of the car 3. As a result, the frequency of large shocks exerted on the car 3 can be reduced, and the car 3 can be more reliably stopped.

    [0128] Further, the following patterns are set for the car acceleration abnormality determination criteria: the normal acceleration detection pattern 118, the first abnormal acceleration detection pattern 119 having a larger value than the normal acceleration detection pattern 118, and the second abnormal acceleration detection pattern 120 having a larger value than the first abnormal acceleration detection pattern 119. When the acceleration of the car 3 exceeds the first abnormal acceleration detection pattern 119, the monitor device 108 outputs an actuation signal to the hoisting machine braking device 106,and when the acceleration of the car 3 exceeds the second abnormal acceleration detection pattern 120, the monitor device 108 outputs an actuation signal to the hoisting machine braking device 106 and the safety device 33. Therefore, the car 3 can be braked stepwise according to the degree of an abnormality in the acceleration of the car 3. Normally, an abnormality occurs in the acceleration of the car 3 before an abnormality occurs in the speed of the car 3. As a result, the frequency of large shocks exerted on the car 3 can be reduced, and the car 3 can be more reliably stopped.

    [0129] Further, the normal speed detection pattern 115, the first abnormal speed detection pattern 116, and the second abnormal speed detection pattern 117 are each set in association with the position of the car 3. Therefore, the first abnormal speed detection pattern 116 and the second abnormal speed detection pattern 117 each can be set in association with the normal speed detection pattern 115 at all locations in the ascending/descending section of the car 3. In the acceleration/deceleration sections, in particular, the first abnormal speed detection pattern 116 and the second abnormal speed detection pattern 117 each can be set to a relatively small value because the normal speed detection pattern 115 has a small value. As a result, the impact acting on the car 3 upon braking can be mitigated.

    [0130] It should be noted that in the above-described example, the car speed sensor 110 is used when the monitor 108 obtains the speed of the car 3. However, instead of using the car speed sensor 110, the speed of the car 3 may be obtained from the position of the car 3 detected by the car position sensor 109. That is, the speed of the car 3 may be obtained by differentiating the position of the car 3 calculated by using the position detection signal from the car position sensor 109.

    [0131] Further, in the above-described example, the car acceleration sensor 111 is used when the monitor 108 obtains the acceleration of the car 3. However, instead of using the car acceleration sensor 111, the acceleration of the car 3 may be obtained from the position of the car 3 detected by the car position sensor 109. That is, the acceleration of the car 3 may be obtained by differentiating, twice, the position of the car 3 calculated by using the position detection signal from the car position sensor 109.

    [0132] Further, in the above-described example, the output portion 114 determines to which braking means it should output the actuation signals according to the degree of the abnormality in the speed and acceleration of the car 3 constituting the abnormality determination factors. However, the braking means to which the actuation signals are to be output may be determined in advance for each abnormality determination factor.

    Embodiment 12



    [0133] Fig. 21 is a schematic diagram showing an elevator apparatus according to Embodiment 12 not part of the present invention. In Fig. 21, a plurality of hall call buttons 125 are provided in the hall of each floor. A plurality of destination floor buttons 126 are provided in the car 3. A monitor device 127 has the output portion 114. An abnormality determination criteria generating device 128 for generating a car speed abnormality determination criteria and a car acceleration abnormality determination criteria is electrically connected to the output portion 114. The abnormality determination criteria generating device 128 is electrically connected to each hall call button 125 and each destination floor button 126. A position detection signal is input to the abnormality determination criteria generating device 128 from the car position sensor 109 via the output portion 114.

    [0134] The abnormality determination criteria generating device 128 includes a memory portion 129 and a generation portion 130. The memory portion 129 stores a plurality of car speed abnormality determination criteria and a plurality of car acceleration abnormality determination criteria, which serve as abnormal judgment criteria for all the cases where the car 3 ascends and descends between the floors. The generation portion 130 selects a car speed abnormality determination criteria and a car acceleration abnormality determination criteria one by one from the memory portion 129, and outputs the car speed abnormality determination criteria and the car acceleration abnormality determination criteria to the output portion 114.

    [0135] Each car speed abnormality determination criteria has three detection patterns each associated with the position of the car 3, which are similar to those of Fig. 19 of Embodiment 11. Further, each car acceleration abnormality determination criteria has three detection patterns each associated with the position of the car 3, which are similar to those of Fig. 20 of Embodiment 11.

    [0136] The generation portion 130 calculates a detection position of the car 3 based on information from the car position sensor 109, and calculates a target floor of the car 3 based on information from at least one of the hall call buttons 125 and the destination floor buttons 126. The generation portion 130 selects one by one a car speed abnormality determination criteria and a car acceleration abnormality determination criteria used for a case where the calculated detection position and the target floor are one and the other of the terminal floors.

    [0137] Otherwise, this embodiment is of the same construction as Embodiment 11.

    [0138] Next, operation is described. A position detection signal is constantly input to the generation portion 130 from the car position sensor 109 via the output portion 114. When a passenger or the like selects any one of the hall call buttons 125 or the destination floor buttons 126 and a call signal is input to the generation portion 130 from the selected button, the generation portion 130 calculates a detection position and a target floor of the car 3 based on the input position detection signal and the input call signal, and selects one out of both a car speed abnormality determination criteria and a car acceleration abnormality determination criteria. After that, the generation portion 130 outputs the selected car speed abnormality determination criteria and the selected car acceleration abnormality determination criteria to the output portion 114.

    [0139] The output portion 114 detects whether or not there is an abnormality in the speed and the acceleration of the car 3 in the same way as in Embodiment 11. Thereafter, this embodiment is of the same operation as Embodiment 9.

    [0140] With such an elevator apparatus, the car speed abnormality determination criteria and the car acceleration abnormality determination criteria are generated based on the information from at least one of the hall call buttons 125 and the destination floor buttons 126. Therefore, it is possible to generate the car speed abnormality determination criteria and the car acceleration abnormality determination criteria corresponding to the target floor. As a result, the time it takes for the braking force on the car 3 to be generated after occurrence of an abnormality in the elevator can be reduced even when a different target floor is selected.

    [0141] It should be noted that in the above-described example, the generation portion 130 selects one out of both the car speed abnormality determination criteria and car acceleration abnormality determination criteria from among a plurality of car speed abnormality determination criteria and a plurality of car acceleration abnormality determination criteria stored in the memory portion 129. However, the generation portion may directly generate an abnormal speed detection pattern and an abnormal acceleration detection pattern based on the normal speed pattern and the normal acceleration pattern of the car 3 generated by the control panel 102.

    Embodiment 13



    [0142] Fig. 22 is a schematic diagram showing an elevator apparatus according to Embodiment 13 not part of the present invention. In this example, each of the main ropes 4 is connected to an upper portion of the car 3 via a rope fastening device 131 (Fig. 23). The monitor device 108 is mounted on an upper portion of the car 3. The car position sensor 109, the car speed sensor 110, and a plurality of rope sensors 132 are electrically connected to the output portion 114. Rope sensors 132 are provided in the rope fastening device 131, and each serve as a rope break detecting portion for detecting whether or not a break has occurred in each of the ropes 4. The detection means 112 includes the car position sensor 109, the car speed sensor 110, and the rope sensors 132.

    [0143] The rope sensors 132 each output a rope brake detection signal to the output portion 114 when the main ropes 4 break. The memory portion 113 stores the car speed abnormality determination criteria similar to that of Embodiment 11 shown in Fig. 19, and a rope abnormality determination criteria used as a reference for judging whether or not there is an abnormality in the main ropes 4.

    [0144] A first abnormal level indicating a state where at least one of the main ropes 4 have broken, and a second abnormal level indicating a state where all of the main ropes 4 has broken are set for the rope abnormality determination criteria.

    [0145] The output portion 114 calculates the position of the car 3 based on the input position detection signal. The output portion 114 also calculates the speed of the car 3 and the state of the main ropes 4 based on the input speed detection signal and the input rope brake signal, respectively, as a variety of (in this example, two) abnormality determination factors.

    [0146] The output portion 114 outputs an actuation signal (trigger signal) to the hoisting machine braking device 106 when the speed of the car 3 exceeds the first abnormal speed detection pattern 116 (Fig. 19), or when at least one of the main ropes 4 breaks. When the speed of the car 3 exceeds the second abnormal speed detection pattern 117 (Fig. 19), or when all of the main ropes 4 break, the output portion 114 outputs an actuation signal to the hoisting machine braking device 106 and the safety device 33. That is, the output portion 114 determines to which braking means it should output the actuation signals according to the degree of an abnormality in the speed of the car 3 and the state of the main ropes 4.

    [0147] Fig. 23 is a diagram showing the rope fastening device 131 and the rope sensors 132 of Fig. 22. Fig. 24 is a diagram showing a state where one of the main ropes 4 of Fig. 23 has broken. In Figs. 23 and 24, the rope fastening device 131 includes a plurality of rope connection portions 134 for connecting the main ropes 4 to the car 3. The rope connection portions 134 each include an spring 133 provided between the main rope 4 and the car 3. The position of the car 3 is displaceable with respect to the main ropes 4 by the expansion and contraction of the springs 133.

    [0148] The rope sensors 132 are each provided to the rope connection portion 134. The rope sensors 132 each serve as a displacement measuring device for measuring the amount of expansion of the spring 133. Each rope sensor 132 constantly outputs a measurement signal corresponding to the amount of expansion of the spring 133 to the output portion 114. A measurement signal obtained when the expansion of the spring 133 returning to its original state has reached a predetermined amount is input to the output portion 114 as a break detection signal. It should be noted that each of the rope connection portions 134 maybe provided with a scale device that directlymeasures the tension of the main ropes 4.

    [0149] Otherwise, this embodiment is of the same construction as Embodiment 11.

    [0150] Next, operation is described. When the position detection signal, the speed detection signal, and the break detection signal are input to the output portion 114 from the car position sensor 109, the car speed sensor 110, and each rope sensor 131, respectively, the output portion 114 calculates the position of the car 3, the speed of the car 3, and the number of main ropes 4 that have broken based on the respective detection signals thus input. After that, the output portion 114 compares the car speed abnormality determination criteria and the rope abnormality determination criteria obtained from the memory portion 113 with the speed of the car 3 and the number of broken main ropes 4 calculated based on the respective detection signals input. Through this comparison, the output portion 114 detects whether or not there is an abnormality in both the speed of the car 3 and the state of the main ropes 4.

    [0151] During normal operation, the speed of the car 3 has approximately the same value as the normal speed detection pattern, and the number of broken main ropes 4 is zero. Thus, the output portion 114 detects that there is no abnormality in either the speed of the car 3 or the state of the main ropes 4, and normal operation of the elevator continues.

    [0152] When, for example, the speed of the car 3 abnormally increases and exceeds the first abnormal speed detection pattern 116 (Fig. 19) for some reason, the output portion 114 detects that there is an abnormality in the speed of the car 3. Then, the output portion 114 outputs an actuation signal and a stop signal to the hoisting machine braking device 106 and the control panel 102, respectively. As a result, the hoisting machine 101 is stopped, and the hoisting machine raking device 106 is operated to brake the rotation of the drive sheave 104.

    [0153] Further, when at least one of the main ropes 4 has broken, the output portion 114 outputs an actuation signal and a stop signal to the hoisting machine braking device 106 and the control panel 102, respectively, thereby braking the rotation of the drive sheave 104.

    [0154] If the speed of the car 3 continues to increase after the actuation of the hoisting machine braking device 106 and exceeds the second abnormal speed set value 117 (Fig. 19), the output portion 114 outputs an actuation signal to the safety device 33 while still outputting the actuation signal to the hoisting machine braking device 106. Thus, the safety device 33 is actuated and the car 3 is braked through the same operation as that of Embodiment 2.

    [0155] Further, if all the main ropes 4 break after the actuation of the hoisting machine braking device 106, the output portion 114 outputs an actuation signal to the safety device 33 while still outputting the actuation signal to the hoisting machine braking device 106. Thus, the safety device 33 is actuated.

    [0156] With such an elevator apparatus, the monitor device 108 obtains the speed of the car 3 and the state of the main ropes 4 based on the information from the detection means 112 for detecting the state of the elevator. When the monitor device 108 judges that there is an abnormality in the obtained speed of the car 3 or the obtained state of the main ropes 4, the monitor device 108 outputs an actuation signal to at least one of the hoisting machine braking device 106 and the safety device 33. This means that the number of targets for abnormality detection increases, allowing abnormality detection of not only the speed of the car 3 but also the state of the main ropes 4. Accordingly, an abnormality in the elevator can be detected earlier and more reliably. Therefore, it takes a shorter time for the braking force on the car 3 to be generated after occurrence of an abnormality in the elevator.

    [0157] It should be noted that in the above-described example, the rope sensor 132 is disposed in the rope fastening device 131 provided to the car 3. However, the rope sensor 132 may be disposed in a rope fastening device provided to the counterweight 107.

    [0158] Further, in the above-described example, the present invention is applied to an elevator apparatus of the type in which the car 3 and the counterweight 107 are suspended in the hoistway 1 by connecting one end portion and the other end portion of the main rope 4 to the car 3 and the counterweight 107, respectively. However, the present invention may also be applied to an elevator apparatus of the type in which the car 3 and the counterweight 107 are suspended in the hoistway 1 by wrapping the main rope 4 around a car suspension sheave and a counterweight suspension sheave, with one end portion and the other end portion of the main rope 4 connected to structures arranged in the hoistway 1. In this case, the rope sensor is disposed in the rope fastening device provided to the structures arranged in the hoistway 1.

    Embodiment 14



    [0159] Fig. 25 is a schematic diagram showing an elevator apparatus according to Embodiment 14 not part of the present invention. In this example, a rope sensor 135 serving as a rope brake detecting portion is constituted by lead wires embedded in each of the main ropes 4. Each of the lead wires extends in the longitudinal direction of the rope 4. Both end portion of each lead wire are electrically connected to the output portion 114. A weak current flows in the lead wires. Cut-off of current flowing in each of the lead wires is input as a rope brake detection signal to the output portion 114.

    [0160] Otherwise, this embodiment is of the same construction as Embodiment 13.

    [0161] With such an elevator apparatus, a break in any main rope 4 is detected based on cutting off of current supply to any lead wire embedded in the main ropes 4. Accordingly, whether or not the rope has broken is more reliably detected without being affected by a change of tension of the main ropes 4 due to acceleration and deceleration of the car 3.

    Embodiment 15



    [0162] Fig. 26 is a schematic diagram showing an elevator apparatus according to Embodiment 15 not part of the present invention. In Fig. 26, the car position sensor 109, the car speed sensor 110, and a door sensor 140 are electrically connected to the output portion 114. The door sensor 140 serves as an entrance open/closed detecting portion for detecting open/closed of the car entrance 26. The detection means 112 includes the car position sensor 109, the car speed sensor 110, and the door sensor 140.

    [0163] The door sensor 140 outputs a door-closed detection signal to the output portion 114 when the car entrance 26 is closed. The memory portion 113 stores the car speed abnormality determination criteria similar to that of Embodiment 11 shown in Fig. 19, and an entrance abnormality determination criteria used as a reference for judging whether or not there is an abnormality in the open/close state of the car entrance 26. If the car ascends/descends while the car entrance 26 is not closed, the entrance abnormality determination criteria regards this as an abnormal state.

    [0164] The output portion 114 calculates the position of the car 3 based on the input position detection signal. The output portion 114 also calculates the speed of the car 3 and the state of the car entrance 26 based on the input speed detection signal and the input door-closing detection signal, respectively, as a variety of (in this example, two) abnormality determination factors.

    [0165] The output portion 114 outputs an actuation signal to the hoisting machine braking device 104 if the car ascends/descends while the car entrance 26 is not closed, or if the speed of the car 3 exceeds the first abnormal speed detection pattern 116 (Fig. 19). If the speed of the car 3 exceeds the second abnormal speed detection pattern 117 (Fig. 19), the output portion 114 outputs an actuation signal to the hoisting machine braking device 106 and the safety device 33.

    [0166] Fig. 27 is a perspective view of the car 3 and the door sensor 140 of Fig. 26. Fig. 28 is a perspective view showing a state in which the car entrance 26 of Fig. 27 is open. In Figs. 27 and 28, the door sensor 140 is provided at an upper portion of the car entrance 26 and in the center of the car entrance 26 with respect to the width direction of the car 3. The door sensor 140 detects displacement of each of the car doors 28 into the door-closed position, and outputs the door-closed detection signal to the output portion 114.

    [0167] It should be noted that a contact type sensor, a proximity sensor, or the like may be used for the door sensor 140. The contact type sensor detects closing of the doors through its contact with a fixed portion secured to each of the car doors 28. The proximity sensor detects closing of the doors without contacting the car doors 28. Further, a pair of hall doors 142 for opening/closing a hall entrance 141 are provided at the hall entrance 141. The hall doors 142 are engaged to the car doors 28 by means of an engagement device (not shown) when the car 3 rests at a hall floor, and are displaced together with the car doors 28.

    [0168] Otherwise, this embodiment is of the same construction as Embodiment 11.

    [0169] Next, operation is described. When the position detection signal, the speed detection signal, and the door-closed detection signal are input to the output portion 114 from the car position sensor 109, the car speed sensor 110, and the door sensor 140, respectively, the output portion 114 calculates the position of the car 3, the speed of the car 3, and the state of the car entrance 26 based on the respective detection signals thus input. After that, the output portion 114 compares the car speed abnormality determination criteria and the drive device state abnormality determination criteria obtained from the memory portion 113 with the speed of the car 3 and the state of the car of the car doors 28 calculated based on the respective detection signals input. Through this comparison, the output portion 114 detects whether or not there is an abnormality in each of the speed of the car 3 and the state of the car entrance 26.

    [0170] During normal operation, the speed of the car 3 has approximately the same value as the normal speed detection pattern, and the car entrance 26 is closed while the car 3 ascends/descends. Thus, the output portion 114 detects that there is no abnormality in each of the speed of the car 3 and the state of the car entrance 26, and normal operation of the elevator continues.

    [0171] When, for instance, the speed of the car 3 abnormally increases and exceeds the first abnormal speed detection pattern 116 (Fig. 19) for some reason, the output portion 114 detects that there is an abnormality in the speed of the car 3. Then, the output portion 114 outputs an actuation signal and a stop signal to the hoisting machine braking device 106 and the control panel 102, respectively. As a result, the hoisting machine 101 is stopped, and the hoisting machine braking device 106 is actuated to brake the rotation of the drive sheave 104.

    [0172] Further, the output portion 114 also detects an abnormality in the car entrance 26 when the car 3 ascends/descends while the car entrance 26 is not closed. Then, the output portion 114 outputs an actuation signal and a stop signal to the hoisting machine braking device 106 and the control panel 102, respectively, thereby braking the rotation of the drive sheave 104.

    [0173] When the speed of the car 3 continues to increase after the actuation of the hoisting machine braking device 106, and exceeds the second abnormal speed set value 117 (Fig. 19), the output portion 114 outputs an actuation signal to the safety device 33 while still outputting the actuation signal to the hoisting machine braking device 106. Thus, the safety device 33 is actuated and the car 3 is braked through the same operation as that of Embodiment 2.

    [0174] With such an elevator apparatus, the monitor device 108 obtains the speed of the car 3 and the state of the car entrance 26 based on the information from the detection means 112 for detecting the state of the elevator. When the monitor device 108 judges that there is an abnormality in the obtained speed of the car 3 or the obtained state of the car entrance 26, the monitor device 108 outputs an actuation signal to at least one of the hoisting machine braking device 106 and the safety device 33. This means that the number of targets for abnormality detection increases, allowing abnormality detection of not only the speed of the car 3 but also the state of the car entrance 26. Accordingly, abnormalities of the elevator can be detected earlier and more reliably. Therefore, it takes less time for the braking force on the car 3 to be generated after occurrence of an abnormality in the elevator.

    [0175] It should be noted that while in the above-described example, the door sensor 140 only detects the state of the car entrance 26, the door sensor 140 may detect both the state of the car entrance 26 and the state of the elevator hall entrance 141. In this case, the door sensor 140 detects displacement of the elevator hall doors 142 into the door-closed position, as well as displacement of the car doors 28 into the door-closed position. With this construction, abnormality in the elevator can be detected even when only the car doors 28 are displaced due to a problem with the engagement device or the like that engages the car doors 28 and the elevator hall doors 142 with each other.

    Embodiment 16



    [0176] Fig. 29 is a schematic diagram showing an elevator apparatus according to Embodiment 16 not part of the present invention. Fig. 30 is a diagram showing an upper portion of the hoistway 1 of Fig. 29. In Figs. 29 and 30, a power supply cable 150 is electrically connected to the hoisting machine 101. Drive power is supplied to the hoisting machine 101 via the power supply cable 150 through control of the control panel 102.

    [0177] A current sensor 151 serving as a drive device detection portion is provided to the power supply cable 150. The current sensor 151 detects the state of the hoisting machine 101 by measuring the current flowing in the power supply cable 150. The current sensor 151 outputs to the output portion 114 a current detection signal (drive device state detection signal) corresponding to the value of a current in the power supply cable 150. The current sensor 151 is provided in the upper portion of the hoistway 1. A current transformer (CT) that measures an induction current generated in accordance with the amount of current flowing in the power supply cable 150 is used as the current sensor 151, for example.

    [0178] The car position sensor 109, the car speed sensor 110, and the current sensor 151 are electrically connected to the output portion 114. The detectionmeans 112 includes the car position sensor 109, the car speed sensor 110, and the current sensor 151.

    [0179] The memory portion 113 stores the car speed abnormality determination criteria similar to that of Embodiment 11 shown in Fig. 19, and a drive device abnormality determination criteria used as a reference for determining whether or not there is an abnormality in the state of the hoisting machine 101.

    [0180] The drive device abnormality determination criteria has three detection patterns. That is, a normal level that is the current value flowing in the power supply cable 150 during normal operation, a first abnormal level having a larger value than the normal level, and a second abnormal level having a larger value than the first abnormal level, are set for the drive device abnormality determination criteria.

    [0181] The output portion 114 calculates the position of the car 3 based on the input position detection signal. The output portion 114 also calculates the speed of the car 3 and the state of the hoisting device 101 based on the input speed detection signal and the input current detection signal, respectively, as a variety of (in this example, two) abnormality determination factors.

    [0182] The output portion 114 outputs an actuation signal (trigger signal) to the hoisting machine braking device 106 when the speed of the car 3 exceeds the first abnormal speed detection pattern 116 (Fig. 19), or when the amount of the current flowing in the power supply cable 150 exceeds the value of the first abnormal level of the drive device abnormality determination criteria. When the speed of the car 3 exceeds the second abnormal speed detection pattern 117 (Fig. 19), or when the amount of the current flowing in the power supply cable 150 exceeds the value of the second abnormal level of the drive device abnormality determination criteria, the output portion 114 outputs an actuation signal to the hoistingmachine braking device 106 and the safety device 33. That is, the output portion 114 determines to which braking means it should output the actuation signals according to the degree of abnormality in each of the speed of the car 3 and the state of the hoisting machine 101.

    [0183] Otherwise, this embodiment is of the same construction as embodiment 11.

    [0184] Next, operation is described. When the position detection signal, the speed detection signal, and the current detection signal are input to the output portion 114 from the car position sensor 109, the car speed sensor 110, and the current sensor 151, respectively, the output portion 114 calculates the position of the car 3, the speed of the car 3, and the amount of current flowing in the power supply cable 151 based on the respective detection signals thus input. After that, the output portion 114 compares the car speed abnormality determination criteria and the drive device state abnormality determination criteria obtained from the memory portion 113 with the speed of the car 3 and the amount of the current flowing into the current supply cable 150 calculated based on the respective detection signals input. Through this comparison, the output portion 114 detects whether or not there is an abnormality in each of the speed of the car 3 and the state of the hoisting machine 101.

    [0185] During normal operation, the speed of the car 3 has approximately the same value as the normal speed detection pattern 115 (Fig. 19), and the amount of current flowing in the power supply cable 150 is at the normal level. Thus, the output portion 114 detects that there is no abnormality in each of the speed of the car 3 and the state of the hoisting machine 101, and normal operation of the elevator continues.

    [0186] If, for instance, the speed of the car 3 abnormally increases and exceeds the first abnormal speed detection pattern 116 (Fig. 19) for some reason, the output portion 114 detects that there is an abnormality in the speed of the car 3. Then, the output portion 114 outputs an actuation signal and a stop signal to the hoisting machine braking device 106 and the control panel 102, respectively. As a result, the hoisting machine 101 is stopped, and the hoisting machine braking device 106 is actuated to brake the rotation of the drive sheave 104.

    [0187] If the amount of current flowing in the power supply cable 150 exceeds the first abnormal level in the drive device state abnormality determination criteria, the output portion 114 outputs an actuation signal and a stop signal to the hoisting machine braking device 106 and the control panel 102, respectively, thereby braking the rotation of the drive sheave 104.

    [0188] When the speed of the car 3 continues to increase after the actuation of the hoisting machine braking device 106, and exceeds the second abnormal speed set value 117 (Fig. 19), the output portion 114 outputs an actuation signal to the safety device 33 while still outputting the actuation signal to the hoisting machine braking device 106. Thus, the safety device 33 is actuated and the car 3 is braked through the same operation as that of Embodiment 2.

    [0189] When the amount of current flowing in the power supply cable 150 exceeds the second abnormal level of the drive device state abnormality determination criteria after the actuation of the hoisting machine braking device 106, the output portion 114 outputs an actuation signal to the safety device 33 while still outputting the actuation signal to the hoisting machine braking device 106. Thus, the safety device 33 is actuated.

    [0190] With such an elevator apparatus, the monitor device 108 obtains the speed of the car 3 and the state of the hoisting machine 101 based on the information from the detection means 112 for detecting the state of the elevator. When the monitor device 108 judges that there is an abnormality in the obtained speed of the car 3 or the state of the hoisting machine 101, the monitor device 108 outputs an actuation signal to at least one of the hoisting machine braking device 106 and the safety device 33. This means that the number of targets for abnormality detection increases, and it takes a shorter time for the braking force on the car 3 to be generated after occurrence of an abnormality in the elevator.

    [0191] It should be noted that in the above-described example, the state of the hoisting machine 101 is detected using the current sensor 151 for measuring the amount of the current flowing in the power supply cable 150. However the state of the hoisting machine 101 may be detected using a temperature sensor for measuring the temperature of the hoisting machine 101.

    [0192] Further, in Embodiments 11 through 16 described above, the output portion 114 outputs an actuation signal to the hoistingmachine braking device 106 before outputting an actuation signal to the safety device 33. However, the output portion 114 may instead output an actuation signal to one of the following brakes: a car brake for braking the car 3 by gripping the car guide rail 2, which is mounted on the car 3 independently of the safety device 33; a counterweight brake mounted on the counterweight 107 for braking the counterweight 107 by gripping a counterweight guide rail for guiding the counterweight 107; and a rope brake mounted in the hoistway 1 for braking the main ropes 4 by locking up the main ropes 4.

    [0193] Further, in Embodiments 1 through 16 described above, the electric cable is used as the transmitting means for supplying power from the output portion to the safety device. However, a wireless communication device having a transmitter provided at the output portion and a receiver provided at the safety device may be used instead. Alternatively, an optical fiber cable that transmits an optical signal may be used.

    [0194] Further, in Embodiments 1 through 16, the safety device applies braking with respect to overspeed (motion) of the car in the downward direction. However, the safety device may apply braking with respect to overspeed (motion) of the car in the upward direction by using the safety device fixed upside down to the car.

    Embodiment 17



    [0195] Next, Fig. 31 is a block diagram showing an essential part of an elevator control apparatus according to Embodiment 17 of the present invention. The elevator control apparatus of Embodiment 17 employs dual-system safety system equipments 201 and 202 for the purpose of enhancing reliability. The dual-system circuit arrangement is also adopted in the control units for controlling the safety system equipments 201 and 202. Therefore, the elevator control apparatus employs first and second CPU' s (processing portions) 203 and 204.

    [0196] The first CPU 203 outputs a control signal to a first output interface (output portion) 205. The second CPU 204 outputs the control signal to a second output interface (output portion) 206.

    [0197] The first and second output interfaces 205 and 206 drive and control the safety system equipments 201 and 202 based on the control signals from the first and second CPU's 203 and 204. Upon receiving actuation signals (command signals) from the first and second output interfaces 205 and 206, the safety system equipments 201 and 202 operate to shift the elevator to a safe state.

    [0198] As for the safety system equipments 201 and 202, the safety gears (direct-driving safety gears) 5, 33, 77, and 78 can be given as examples. Further, the safety system equipments 201 and 202 are provided on or in the vicinity of a speed governor and may be designed as electronic governors (direct-acting rope catches) each having an actuator portion for gripping a rope of the speed governor in response to the input of the actuation signal.

    [0199] A two-port RAM 207 is connected to the first and second CPU's 203 and 204 to exchange data therebetween. A signal from a first sensor 208 is input to the first CPU 203. A signal from a second sensor 209 is input to the second CPU 204.

    [0200] The signals from the sensors 208 and 209 are subjected to calculation processings in the CPU's 203 and 204, whereby the speed and position of the car 3 (Fig. 1) is calculated. That is, the sensors 208 and 209 function as both speed sensors and position sensors.

    [0201] The sensors 208 and 209 are provided, for example, on the speed governor described in the above-mentioned embodiments. Employed as the sensors 208 and 209 are, for example, encoders. In addition, as described in the above-mentioned embodiments, the various sensors used to monitor the safety system of the elevator apparatus may be employed as the sensors 208 and 209.

    [0202] The result data on the calculation processings in the CPU's 203 and 204 are exchanged between the CPU's 203 and 204 via the two-port RAM 207. The result data are compared with each other in the CPU's 203 and 204. If a significant difference is recognized in the calculated results or an overspeed (excess of speed) is confirmed, the safety system equipments 201 and 202 are driven via the output interfaces 205 and 206, so that the elevator is shifted to the safe state.

    [0203] The elevator control apparatus is provided with a +5 V-power supply voltage monitoring circuit 211 for monitoring the power supply voltage of the CPU 203 and a +3.3 V-power supply voltage monitoring circuit 212 for monitoring the power supply voltage of the CPU 204. The power supply voltage monitoring circuits 211 and 212 are constituted by, for example, integrated circuits (IC's).

    [0204] The power supply voltage monitoring circuits 211 and 212 monitor whether stable power supply voltages are supplied to the CPU's 203 and 204. When an abnormality in power supply voltage exceeding the rated voltages of the CPU's 203 and 204 occurs, the CPU's 203 and 204 are forcibly reset based on the information from the power supply voltage monitoring circuits 203 and 204, and the elevator is shifted to the safe state by the safety system equipments 201 and 202, designed for failsafeness.

    [0205] The monitoring voltage is input to the +5 V-power supply voltage monitoring circuit 211 from a first monitoring voltage input circuit 213. The monitoring voltage is input to the +3.3 V-power supply voltage monitoring circuit 212 from a second monitoring voltage input circuit 214.

    [0206] A voltage monitoring soundness checking function circuit 215 (hereinafter abbreviated as the checking function circuit 215) for monitoring the soundness of the power supply voltage monitoring circuits 211 and 212 is connected to the power supply voltage monitoring circuits 211 and 212 and the CPU's 203 and 204. The checking function circuit 215 is constituted by, for example, a programmable gate IC such as a field programmable gate array (FPGA) or the like. Alternatively, the checking function circuit 215 can also be realized by an ASIC, a CPLD, a PLD, a gate array, or the like.

    [0207] When an abnormality in power supply voltage is detected, voltage abnormality detection signals 301 and 302 are output to the checking function circuit 215 from the power supply voltage monitoring circuits 211 and 212, and reset signals 303 and 304 are output from the checking function circuit 215 to the CPU's 203 and 204.

    [0208] Control signals 305 and 306 are input to the checking function circuit 215 from the CPU's 203 and 204. Monitoring input voltage forcible change signals 307 and 308 for forcibly changing voltages applied to input pins of the power supply voltage monitoring circuits 211 and 212 into low voltages are output from the checking function circuit 215.

    [0209] When the monitoring input voltage forcible change signals 307 and 308 are output, monitoring input voltage forcible change circuits 216 and 217 forcibly lower the voltages applied to the input pins of the power supply voltage monitoring circuits 211 and 212.

    [0210] The checking function circuit 215 is connected to a first data bus 218 for the first CPU 203 and a second data bus 219 for the second CPU 204.

    [0211] A program for calculating the position and the speed of the car 3, a program for making a determination on an abnormality in the elevator, a program for confirming the soundness of the power supply voltage monitoring circuits 211 and 212, and the like are stored in a ROM (not shown) as a storage portion connected to the CPU's 203 and 204. The elevator control apparatus of Embodiment 17 includes a computer (microcomputer) including the CPU' s 203 and 204 and the two-port RAM 207 shown in Fig. 31, a ROM, and the like.

    [0212] Fig. 32 is a circuit diagram showing an example of a concrete configuration of the checking function circuit 215 in Fig. 31.

    [0213] The control signals 305 and 306 include selection signals 309 and 310, output permission signals 311 and 312, and chip selection signals 313 and 314.

    [0214] The selection signals 309 and 310 are two-bit signals for choosing which one of the power supply voltage monitoring circuits 211 and 212 should be checked in soundness. The output permission signals 311 and 312 permit the monitoring input voltage forcible change signals 307 and 308 to be output from the checking function circuit 215, and latch the contents selected by the selection signals 309 and 310. In other words, the output permission signals also serve as latch trigger signals.

    [0215] When an abnormality in power supply voltage is detected, a voltage abnormality signal latch circuit 228 in the checking function circuit 215 latches the voltage abnormality detection signals 301 and 302. Latched states, of these signals in the voltage abnormality signal latch circuit 228, are released when latch release signals 315 and 316 constituting parts of the control signals 305 and 306 are input.

    [0216] The selection signals 309 and 310 are input to first and second selectors 229 and 230. The first and second selectors 229 and 230 make a changeover in choosing which one of the power supply voltage monitoring circuits 211 and 212 should be checked in soundness, based on the selection signals 309 and 310. First and second selected content latch circuits 231 and 232 latch the contents selected by the selectors 229 and 230.

    [0217] A change signal output buffer 233 is interposed in a stage preceding the outputting of the monitoring input voltage forcible change signals 307 and 308.

    [0218] The checking function circuit 215 is also provided with a plurality of data bus output buffers 234 for the first CPU 203 and a plurality of data bus output buffers 235 for the second CPU 204.

    [0219] Fig. 33 is a chart for explaining the meaning of data on respective bits of the data buses 218 and 219 at the time when the first and second CPU' s 203 and 204 read data from the checking function circuit 215 in Fig. 31.

    [0220] Next, Fig. 34 is a flowchart showing a method of checking power supply voltage monitoring soundness on the first CPU 203 side in Fig. 31. The elevator control apparatus performs interrupt calculation including a calculation processing for monitoring an abnormality in the elevator, such as an overspeed of the car in each interval of a calculation cycle time (e.g., 5 milliseconds). In executing a main routine of interrupt calculation, the elevator control apparatus determines whether to check the soundness of the power supply voltage monitoring circuits 211 and 212 or not (step S1).

    [0221] A check of soundness is carried out at a preset timing. In other words, a check of soundness is carried out when the preset time has elapsed since the stoppage of the car. More specifically, a check of soundness is carried out in off hours when the number of passengers utilizing the elevator is small, in the nighttime when the operation of the elevator is stopped, etc.

    [0222] When the soundness is not checked, a return to the main routine is made. In checking the soundness, first of all, the latched states of the voltage abnormality detecting signals 301 and 302 as error signals in the checking function circuit 215 are released. In other words, the latch release signal 315 is output to the checking function circuit 215 (step S2). The latch release signal 315 is input to the voltage abnormality signal latch circuit 228, and the latched states of the voltage abnormality detection signals 301 and 302 are released.

    [0223] Then, after it has been confirmed that the output permission signal 311 for the first CPU 203 is high in level (step S3), a request to render the output permission signal 312 high in level is made to the second CPU 204 as well via the two-port RAM 207 (step S4).

    [0224] After that, the selection signal 309 for choosing which one of the power supply voltage monitoring circuits 211 and 212 should be checked in soundness is output to the checking function circuit 215 and is latched (step S5).

    [0225] Subsequently, a request to render the output permission signal 312 low in level is made to the CPU 204 via the two-port RAM 207 (step S6). After the output permission signal 312 low in level has been confirmed, the output permission signal 311 is rendered low in level (step S7). Thus, in the checking function circuit 215, the selected content latch circuit 231 latches the selection signal 309 in synchronism with the falling of the output permission signal 311. The monitoring input voltage forcible change signal 307 is then output from the checking function circuit 215 to the power supply voltage monitoring circuit 211.

    [0226] As a result, an abnormality in voltage is detected in the power supply voltage monitoring circuit 211, and the voltage abnormality detection signal 301 is input to the checking function circuit 215. Then, in the checking function circuit 215, the voltage abnormality signal latch circuit 228 latches the voltage abnormality detection signal 301. At the same time, the reset signals 303 and 304 from the checking function circuit 215 are input to the CPU's 203 and 204 (step S8), whereby the CPU's 203 and 204 are reset.

    [0227] At that time, it is indispensable that only one power supply voltage monitoring circuit is checked during a single soundness checking operation. When the soundness of another power supply voltage monitoring circuit is checked in succession, the soundness of this power supply voltage monitoring circuit is checked only after the soundness of the preceding power supply voltage monitoring circuit has been checked. Also, in the case where a plurality of power supply voltage monitoring circuits are provided because a plurality of different voltages are supplied to a single CPU from a plurality of power sources, those respective power supply voltage monitoring circuits are sequentially checked in soundness one by one. Such a sequential check of the soundness of a plurality of power supply voltage monitoring circuits can be set on a program (software) in advance.

    [0228] Fig. 35 is a flowchart showing the operation where the CPU's 203 and 204 are reset in the elevator control apparatus of Fig. 31. Needless to say, the CPU's 203 and 204 may be reset for various reasons including a genuine abnormality in power supply voltage as well as checking of soundness.

    [0229] When being reset, the CPU's 203 and 204 first start an initialization processing of the software (step S9). Next, in the course of the initialization processing, data obtained from the checking function circuit 215 are read (step S10). Then, a pre-reset situation is confirmed from the latched contents, and it is determined whether or not there is an abnormality in power supply voltage or a malfunction in the power supply voltage monitoring circuits 211 and 212 (step S11). In other words, it is determined whether the CPU's 203 and 204 were reset because of a check of soundness or a genuine abnormality in power supply voltage.

    [0230] For instance, when an abnormality in voltage is indicated despite the fact that the outputs of the output permission signals 311 and 312 have not been rendered low in level, it is determined that a genuine abnormality in power supply voltage has occurred. In contrast, when the data obtained from the checking function circuit 215 indicate no abnormality in voltage despite the fact that the outputs of the output permission signals 311 and 312 have been rendered low in level, it is determined that there is a malfunction in the power supply voltage monitoring circuits 211 and 212 or in the checking function circuit 215 itself. If the monitoring input voltage forcible change signals 307 and 308 have been output in this state, it is determined that there is a malfunction in the power supply voltage monitoring circuits 211 and 212. If the monitoring input voltage forcible change signals 307 and 308 have not been output, it is determined that there is a malfunction in the checking function circuit 215 itself.

    [0231] When no abnormality or malfunction is detected as a result of reading the data obtained from the checking function circuit 215, a transition to the main routine is permitted (step S12). Although the present description exclusively deals with reset about power supply voltage, reset may be performed in response to detection of another malfunction or a check of the soundness of another circuit. In this case, a transition to the main routine is permitted after it has been confirmed that there is absolutely no abnormality or malfunction.

    [0232] When some abnormality or malfunction is detected as a result of reading the data obtained from the checking function circuit 215, a command signal for operating the safety system equipments 201 and 202 is output (step S13), and the elevator is shifted to the safe state.

    [0233] With the elevator control apparatus described above, soundness can be monitored in respect of a malfunction in the power supply voltage monitoring circuits 211 and 212 as well as the abnormality in power supply voltage. This makes it possible to achieve further enhancement of reliability of the monitoring of power supply voltage.

    [0234] Conventionally, the dual systems are used for the respective power supply voltage monitoring circuits for the sake of failsafeness or the securement of safety. However, since this is unnecessary in the above-mentioned elevator control apparatus, it is possible to achieve simple configuration and suppress the increase in cost. Moreover, the reliability of the above-mentioned elevator control apparatus is equal to that of power supply voltage monitoring circuits adopting dual systems.

    [0235] Furthermore, since the dual-system circuit arrangement employing the two CPU's 203 and 204 is adopted and the operations of checking soundness by means of the CPU' s 203 and 204 can be mutually confirmed via the two-port RAM 207, a malfunction in the checking function circuit 215 or software can also be detected.

    [0236] The safety system of Embodiment 17 can be provided either as part of an operation control unit (control panel) or independently of the operation control unit.

    [0237] Although the safety system is described as the elevator control apparatus in Embodiment 17, the present invention is also applicable to an operation control unit serving as an elevator control apparatus.

    [0238] In addition, although the dual-system circuit arrangement employing the two CPU's 203 and 204 is adopted in Embodiment 17, the present invention is also applicable to an elevator control apparatus performing calculation processings by means of a single CPU. In this case, an abnormality in power supply voltage and a malfunction in a power supply voltage monitoring circuit can be discriminated from each other using data obtained from a voltage monitoring soundness checking function circuit.

    Embodiment 18



    [0239] Next, Fig. 36 is a schematic diagram showing an elevator apparatus according to Embodiment 18 not part of the present invention. Referring to the figure, a drive device (hoisting machine) 251 and a deflector pulley 252 are provided on the upper portion of a hoistway. The drive device 251 has a drive sheave 251a and a motor portion (drive device main body) 251b, which rotates the drive, sheave 251a. The motor portion 251b is provided with an electromagnetic braking device for braking rotation of the drive sheave 251a.

    [0240] A main rope 253 is wound around the drive sheave 251a and the deflector pulley 252. A car 254 and a counterweight 255 are suspended within the hoistway by means of the main rope 253.

    [0241] A mechanical safety gear 256 for stopping the car 254 as an emergency measure through engagement with a guide rail (not shown) is mounted on a lower portion of the car 254. A speed governor sheave 257 is disposed on the upper portion of the hoistway. A tension pulley 258 is disposed on the lower portion of the hoistway. A speed governor rope 259 is wound around the speed governor sheave 257 and the tension pulley 258. The speed governor rope 259 is connected at both end portions to an actuating lever 256a of the safety gear 256. Thus, the speed governor sheave 257 is rotated at the speed corresponding to the running speed of the car 254.

    [0242] The speed governor sheave 257 is provided with sensors 208 and 209 composed of encoders outputting signals for detecting a position and a speed of the car 254. The signals from the sensors 208 and 209 are input to an elevator control apparatus 260. The elevator control apparatus 260 is configured in the same manner as shown in Fig. 31.

    [0243] A speed governor rope grip device (rope catch) 261 serving as the safety system equipments 201 and 202 for gripping the speed governor rope 259 and stopping circulation thereof is provided on the upper portion of the hoistway (on or in the vicinity of the speed governor sheave 257). The speed governor rope grip device 261 has a grip portion 261a for gripping the speed governor rope 259 and an electromagnetic actuator 261b for driving the grip portion 261a.

    [0244] When an actuation signal from the elevator control apparatus 260 is input to the speed governor rope grip device 261, the grip portion 261a is displaceddue to a driving force of the electromagnetic actuator 261b, and the speed governor rope 259 is stopped. When the speed governor rope 259 is stopped, the actuating lever 256a is operated due to a movement of the car 254, the safety gear 256 operates, and the car 254 suddenly stops.

    [0245] In the elevator control apparatus described above, an actuation signal is input to the speed governor rope grip device 261 when an abnormality in the elevator such as an overspeed of the car 254 or the like is detected, and the car 254 suddenly stops.

    [0246] The elevator is shifted to a safe state also when an abnormality is detected by the power supply voltage monitoring circuits 211 and 212 or the checking function circuit 215 shown in Fig. 31.

    [0247] As a method of shifting the elevator to a safe state, it is conceivable, for example, to immediately stop the car 254 by stopping the rotation of the drive sheave 251a or to suddenly stop the car 254 by means of the speed governor rope grip device 261. Alternatively, it is also conceivable to stop the car 254 after having moved it to the nearest floor by controlling the drive device 251.

    [0248] As described above, the elevator control apparatus according to the present invention is also applicable to an elevator apparatus employing a speed governor rope grip device as a safety system equipment.


    Claims

    1. An elevator control apparatus comprising:

    a processing portion (203, 204) for performing a processing relating to control of an elevator; and

    a power supply voltage monitoring circuit (211, 212) for monitoring a power supply voltage supplied to the processing portion (203, 204), elevator control apparatus wherein:

    the elevator control apparatus further comprises a voltage monitoring soundness checking function circuit (215) which is adapted to output a monitoring input voltage forcible change signal (307, 308) for forcibly changing a power supply voltage input to the power supply voltage monitoring circuit (211, 212) in response to a control signal (305, 306) from the processing portion (203, 204) and to which a voltage abnormality detection signal (301, 302) from the power supply voltage monitoring circuit (211, 212) is input;

    the voltage monitoring soundness checking function circuit (215) holds at least some of contents of signals exchanged between the processing portion (203, 204) and the power supply voltage monitoring circuit (211, 212), and

    the processing portion (203, 204) checks soundness of the power supply voltage monitoring circuit (211, 212) by reading data held by the voltage monitoring soundness checking function circuit (215) .


     
    2. An elevator control apparatus according to Claim 1, characterized in that the processing portion (203, 204) includes a first CPU (203) and a second CPU (204), and
    the first CPU (203) and the second CPU (204) can mutually check their soundness checking operations via a two-port RAM (207).
     
    3. An elevator control apparatus according to Claim 1, characterized by further comprising:

    a monitoring input voltage forcible change circuit (216, 217) for forcibly lowering a power supply voltage input to the power supply voltage monitoring circuit (211, 212) through an input of the monitoring input voltage forcible change signal (307, 308).


     
    4. An elevator control apparatus according to Claim 1, characterized in that the processing portion (203, 204) outputs a command signal for shifting the elevator to a safe state to a safety system equipment (201, 202) when a malfunction in the power supply voltage monitoring circuit (211, 212) is detected.
     
    5. An elevator control apparatus according to Claim 1, characterized in that the power supply voltage monitoring circuit (211, 212) includes a plurality of power supply voltage monitoring circuits (211, 212) for monitoring voltages of a plurality of power sources that are different in voltage from one another, and
    the control signal (305, 306) transmitted from the processing portion (203, 204) to the voltage monitoring soundness checking function circuit (215) includes a selection signal (309, 310) for choosing which one of the plurality of power supply voltage monitoring circuits (211, 212) is checked in soundness.
     
    6. An elevator control apparatus according to Claim 5, characterized in that the processing portion (203, 204) can sequentially check soundness of the respective power supply voltage monitoring circuits (211, 212) one by one.
     
    7. An elevator control apparatus according to Claim 1, characterized in that the voltage monitoring soundness checking function circuit (215) is constituted by a programmable gate IC.
     


    Ansprüche

    1. Aufzugsteuerungsvorrichtung, umfassend:

    ein Verarbeitungsteil (203, 204) zum Durchführen einer Verarbeitung in Bezug auf die Steuerung eines Aufzugs; und

    eine Versorgungsspannungsüberwachungsschaltung (211, 212) zum Überwachen einer Versorgungsspannung, die dem Verarbeitungsteil (203, 204) zugeführt wird, wobei:

    die Aufzugsteuerungsvorrichtung ferner eine Spannungs-überwachungsfehlerfreiheits-Prüffunktionsschaltung (215) umfasst, die ausgebildet ist, um ein Überwachungseingangsspannungszwangsänderungssignal (307, 308) zum zwangsweisen Ändern einer zu der Versorgungsspannungsüberwachungsschaltung (211, 212) eingegebenen Versorgungsspannung in Abhängigkeit von einem Steuersignal (305, 306) von dem Verarbeitungsteil (203, 204) auszugeben, und in die ein Spannungsabweichungsdetektiersignal (301, 302) von der Versorgungsspannungsüberwachungsschaltung (211, 212) eingegeben wird;

    die Spannungsüberwachungsfehlerfreiheits-Prüffunktionsschaltung (215) mindestens einige der Inhalte von Signalen hält, die zwischen dem Verarbeitungsteil (203, 204) und der Versorgungsspannungsüberwachungsschaltung (211, 212) ausgetauscht wurden, und

    das Verarbeitungsteil (203, 204) die Fehlerfreiheit der Versorgungsspannungsüberwachungsschaltung (211, 212) durch Lesen von Daten, die von der Spannungs-überwachungsfehlerfreiheits-Prüffunktionsschaltung (215) gehalten werden, überprüft.


     
    2. Aufzugsteuerungsvorrichtung nach Anspruch 1, dadurch gekennzeichnet, dass das Verarbeitungsteil (203, 204) eine erste CPU (203) und eine zweite CPU (204) umfasst, und
    die erste CPU (203) und die zweite CPU (204) gegenseitig ihre Fehlerfreiheitsprüfvorgänge über ein Zwei-Port-RAM (207) zu prüfen imstande sind.
     
    3. Aufzugsteuerungvorrichtung nach Anspruch 1, dadurch gekennzeichnet, dass sie ferner umfasst:

    eine Überwachungseingangsspannungszwangsänderungsschaltung (216, 217) zum zwangsweisen Senken einer zu der Versorgungsspannungsüberwachungsschaltung (211, 212) eingegebenen Versorgungsspannung durch einen Eingang des Überwachungseingangsspannungszwangsänderungssignals (307, 308).


     
    4. Aufzugsteuerungsvorrichtung nach Anspruch 1, dadurch gekennzeichnet, dass das Verarbeitungsteil (203, 204) an eine Sicherheitssystemeinrichtung (201, 202) ein Befehlssignal zum Bringen des Aufzugs in einen sicheren Zustand ausgibt, wenn in der Versorgungsspannungsüberwachungsschaltung (211, 212) eine Störung detektiert wird.
     
    5. Aufzugsteuerungsvorrichtung nach Anspruch 1, dadurch gekennzeichnet, dass die Versorgungsspannungsüberwachungsschaltung (211, 212) mehrere Versorgungsspannungsüberwachungsschaltungen (211, 212) zum Überwachen von Spannungen von mehreren Stromquellen, die sich in der Spannung voneinander unterscheiden, umfasst, und
    das Steuerungssignal (305, 306), welches von dem Verarbeitungsteil (203, 204) an die Spannungsüberwachungsfehlerfreiheits-Prüffunktionsschaltung (215) übertragen wird, ein Auswahlsignal (309, 310) zum Auswählen, welche der mehreren Versorgungsspannungs-überwachungsschaltungen (211, 212) auf Fehlerfreiheit überprüft wird, umfasst.
     
    6. Aufzugsteuerungsvorrichtung nach Anspruch 5, dadurch gekennzeichnet, dass das Verarbeitungsteil (203, 204) die Fehlerfreiheit der entsprechenden Versorgungsspannungsüberwachungsschaltungen (211, 212) sequentiell, eine nach der anderen, überprüfen kann.
     
    7. Aufzugsteuerungsvorrichtung nach Anspruch 1, dadurch gekennzeichnet, dass die Spannungsüberwachungsfehlerfreiheits-Prüffunktionsschaltung (215) durch einen programmierbaren integrierten Gatterschaltkreis gebildet wird.
     


    Revendications

    1. Appareil de commande d'ascenseur, comprenant :

    une portion de traitement (203, 204) pour effectuer un traitement relatif à la commande d'un ascenseur ; et

    un circuit de surveillance de tension d'alimentation électrique (211, 212) pour surveiller une tension d'alimentation électrique fournie à la portion de traitement (203, 204), dans lequel

    l'appareil de commande d'ascenseur comprend en outre un circuit de fonction de contrôle d'intégrité de surveillance de tension (215) qui est apte à délivrer un signal de changement forcé de tension d'entrée de surveillance (307, 308) pour changer de manière forcée une entrée de tension d'alimentation électrique dans le circuit de surveillance de tension d'alimentation électrique (211, 212) en réponse à un signal de commande (305, 306) provenant de la portion de traitement (203, 204) et dans lequel un signal de détection d'anomalie de tension (301, 302) provenant du circuit de surveillance de tension d'alimentation électrique (211, 212) est entré ;

    le circuit de fonction de contrôle d'intégrité de surveillance de tension (215) contient au moins une partie du contenu des signaux échangés entre la portion de traitement (203, 204) et le circuit de surveillance de tension d'alimentation électrique (211, 212), et

    la portion de traitement (203, 204) contrôle l'intégrité du circuit de surveillance de tension d'alimentation électrique (211, 212) en lisant des données contenues dans le circuit de fonction de contrôle d'intégrité de surveillance de tension (215).


     
    2. Appareil de commande d'ascenseur selon la revendication 1, caractérisé en ce que la portion de traitement (203, 204) comprend une première CPU (203) et une deuxième CPU (204), et
    la première CPU (203) et la deuxième CPU (204) peuvent mutuellement contrôler leurs opérations de contrôle d'intégrité par l'intermédiaire d'une RAM à deux ports (207).
     
    3. Appareil de commande d'ascenseur selon la revendication 1, caractérisé en ce qu'il comprend en outre :

    un circuit de changement forcé de tension d'entrée de surveillance (216, 217) pour abaisser de manière forcée une entrée de tension d'alimentation électrique dans le circuit de surveillance de tension d'alimentation électrique (211, 212) par l'intermédiaire d'une entrée du signal de changement forcé de tension d'entrée de surveillance (307, 308).


     
    4. Appareil de commande d'ascenseur selon la revendication 1, caractérisé en ce que la portion de traitement (203, 204) délivre un signal de commande pour faire passer l'ascenseur dans un état sûr à un équipement de système de sécurité (201, 202) lorsqu'un dysfonctionnement du circuit de surveillance de tension d'alimentation électrique (211, 212) est détecté.
     
    5. Appareil de commande d'ascenseur selon la revendication 1, caractérisé en ce que le circuit de surveillance de tension d'alimentation électrique (211, 212) comprend une pluralité de circuits de surveillance de tension d'alimentation électrique (211, 212) pour surveiller des tensions d'une pluralité de sources d'alimentation électrique ayant des tensions différentes l'une de l'autre, et
    le signal de commande (305, 306) transmis de la portion de traitement (203, 204) au circuit de fonction de contrôle d'intégrité de surveillance de tension (215) comprend un signal de sélection (309, 310) pour choisir lequel de la pluralité de circuits de surveillance de tension d'alimentation électrique (211, 212) a son intégrité contrôlée.
     
    6. Appareil de commande d'ascenseur selon la revendication 5, caractérisé en ce que la portion de traitement (203, 204) peut contrôler séquentiellement l'intégrité des circuits de surveillance de tension d'alimentation électrique (211, 212) respectifs l'un après l'autre.
     
    7. Appareil de commande d'ascenseur selon la revendication 1, caractérisé en ce que le circuit de fonction de contrôle d'intégrité de surveillance de tension (215) est constitué d'un circuit intégré de portes programmables.
     




    Drawing





































































































    Cited references

    REFERENCES CITED IN THE DESCRIPTION



    This list of references cited by the applicant is for the reader's convenience only. It does not form part of the European patent document. Even though great care has been taken in compiling the references, errors or omissions cannot be excluded and the EPO disclaims all liability in this regard.

    Patent documents cited in the description